Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so the safety profile is covered; the description adds real value by disclosing the payload contents — change since previous scan, severity breakdown, 24h and 7d uptime, and last-scan deltas. It does not cover behavior for an unknown/unmonitored site or whether the data is cached versus freshly scanned.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.