Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint, openWorldHint, idempotentHint), the description adds meaningful behavioral context: it states that the tool does not mark replies as read (implied by 'No ... marking read'), and it includes a security warning that participant text is untrusted data, not instructions. These details inform the agent about side effects (or lack thereof) and trust boundaries, which are not covered by the annotations alone.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.