Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=false, so the safety profile is covered structurally. The description reinforces this usefully with "Nothing is created by this tool," which is meaningful for a tool that hands back a link someone might assume registers something. It does not, however, say that the returned artifact is a URL, whether it expires, or whether sign-in is needed to use the link.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.