Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and closed-world, so the safety profile is fully covered. The description adds value beyond that by specifying 'public profile' (only public data is exposed) and by enumerating the fields returned, which matters because there is no output schema. It does not state what happens when the handle is unknown, a minor remaining gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.