Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and open-world behavior, so the safety profile is covered. The description adds the useful look-up-by-search-result semantics and the expectation of returning a URL to present to the user. It says nothing about failure behavior for an unknown id or bank, or about rate limits, which would raise this above a 3.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.