Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only/idempotent/non-destructive, and the description adds substantial unrepeatable context: no access logging, no author notification, snapshot is frozen so later edits don't propagate, no contact info/references/attachments, and strict case-sensitive matching ('don't retry with a different case').
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.