Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full disclosure burden and delivers nothing: it does not say whether the tool reads an inbox, mutates mailboxes, requires credentials, or returns a prompt pack versus sorted data. Worse, 'delivered as a copy-paste prompt pack with examples' actively obscures whether this is a workflow generator rather than an operation on email.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.