Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: auth requirement, that nothing in a message changes project state, triage timing, dedup semantics on message_id, body/subject size caps, and a specific withholding rule for mail reports over 1500 characters or containing quoted email. The reply-as-draft-task flow is exactly the kind of side effect an agent needs disclosed before calling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.