Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false and a closed world, so the safety profile is fully covered. The description adds only the content taxonomy of the feed, and stays silent on return shape (notification fields, unread flag semantics) and whether the list is scoped to the authenticated user/site.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.