Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and closed-world, so the safety profile is covered. The description adds genuinely non-obvious data semantics beyond that: the three counts are 'kept separate and never added together,' which prevents an agent from summing them into a bogus total, and it discloses the data source (the Goppa plugin on the user's own site), implying a site without the plugin yields nothing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.