Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnly, openWorld, idempotent=false, destructive=false), and the description adds substantial context beyond them: free/read-only, catalog contents (family + category + variants + css2 URL), the silent fallback to Liberation Sans with no error, and the ambiguity of an empty result. This is information an agent cannot get from the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.