Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare idempotentHint=true, destructiveHint=false, and readOnlyHint=false, so the agent knows this is a safe, repeatable mutation. The description adds the meaningful state change (Spam to Inbox), but does not say what happens if the message is not in Spam, whether failure is silent, or what is returned.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.