Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, openWorldHint and destructiveHint=false, so the safety profile is fully covered by structured data. The description still adds real value by clarifying that the lookup hits live npm state ('exists on npm today', implying results are not cached or stale) and that browser entry points come back. That is useful beyond the annotations, but there is no mention of error behavior for nonexistent packages or network/rate-limit considerations for an open-world call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.