Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare write, non-idempotent, open-world, non-destructive; the description adds substantial beyond that: management-permission requirement, admin notification side effect, per-batch (≤20) and per-day (20) rate limits, and hard scope fences (no cross-activity/applicant/re-entry reuse, no audience expansion, no invites, no contact delivery). That is exactly the behavioral context an agent cannot infer from the flags.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.