Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=false, so the safety profile is covered; the description adds that this is a purely local, format-only validation with no external data retrieval, and that alphanumeric CNPJ is supported. That is meaningful context beyond the annotations, though it does not cover error behavior for malformed input.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.