Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds substantial context beyond the annotations: nothing is sent by the tool, the message only leaves the system after the user opens the review link and confirms, the link expires, and the agent is instructed to tell the user confirmation is still required. This is exactly the kind of non-obvious, safety-relevant behavior annotations cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.