Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly, idempotent, non-destructive and closed-world, so the safety profile is free. The description adds genuinely new context beyond them: the exact shape of the returned card and an explicit data-scope guarantee ('no pet, owner or medical data'), which tells the agent this call is privacy-safe and non-medical. It stops short of stating permissions or error behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.