Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations: it discloses the confirm_required refusal path, that the removal is recorded in the Activity log, that nothing is sent to X, and that no X send tool exists so the agent must act with the customer's own X access. These are non-obvious behavioral and side-effect facts that annotations (destructiveHint/idempotentHint) cannot convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.