Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, non-destructive, closed-world), so the bar is lower, yet the description adds real behavioral context: results are labeled by ownership, delivery channel, availability, and plan scope, and it discloses what is intentionally withheld. It doesn't mention limits on result size beyond cursor behavior, which would round it out.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.