Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnlyHint=true, destructiveHint=false), and the description adds substantial extra context: per-call pricing under x402 vs API key, the verdict taxonomy (block/review/no_findings) with verdict_reasons, per-component status values (ok/unavailable/error), and the important caveat that reputation and domain never change the verdict. That is well beyond what the structured fields convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.