Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and open-world behavior, so the safety profile needs no restating. The description adds the underlying mechanism (UNPKG ?meta) and the important trait that results reflect real archive contents rather than inference, but says nothing about failure modes for unresolvable packages or truncation when limit is hit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.