Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnlyHint, idempotentHint, non-destructive), and the description adds genuine context on top: test dates are deliberately absent and EPSO supplies them separately, plus the obligation to link to "url" and "official_url" when presenting an offer. That is real behavioral guidance beyond the structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.