Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint=false, destructiveHint=true), the description discloses who sees the reply ('visible to project collaborators'), that it is posted immediately, that it is attributed as agent-created, and that later removal cannot undo prior delivery or reading — real context for a destructive write. The no-retry instruction also prevents a common failure loop that annotations cannot express.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.