Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructiveHint=true, but the description adds the real blast radius: follow-ups stop yet the recipient is not deleted, shared lists and global subscriptions are untouched, no email is sent, and already-emitted follow-ups are not recalled. It also discloses prerequisites (confirmed suppression, verified email identity, runtime attestation), which the annotations do not cover.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.