Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and openWorldHint, so the safety profile is covered. The description adds that validation is deterministic and that the 4th character encodes entity type, which is useful behavioral context. It does not explicitly state that this checks format only and does not confirm the PAN is active or registered with CBDT, which is an important distinction an agent would need.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.