Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds two useful bits beyond that: binary contents are never returned (output scope) and the file must be 'authorized' (a permission precondition). It stops short of explaining what 'decoded table' inspection actually yields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.