Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/openWorld, so the safety profile is covered; the description adds genuinely new behavioral facts: the SSRF guard, the 10 MB decoded cap, the base64 PNG return format, and an explanation of why portrait segmentation is not available server-side. Some of this (10 MB cap, private addresses) restates the schema, which keeps it out of the top band.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.