Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=false, destructiveHint=false, openWorldHint=false, so the safety profile is covered. The description adds real beyond-annotation context: decoding is local and exact, no prior visit or fetch needed, returns the author's exact bytes with no anew-injected tags and byte-for-byte re-encoding. It does not fully explain the idempotentHint=false nuance, but the behavioral substance is well above the annotation baseline.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.