Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already state readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered by structured data. The description adds the fact that escaping covers the five special HTML characters and that unescape handles named/numeric entities, which is behaviorally useful. However, it doesn't disclose edge cases like double-encoding behavior, unknown entity handling, or whether output is a string. With annotations covering the safety aspects, a 3 is appropriate: this is the baseline 'adds some value' score, not higher because the description doesn't explain what happens with invalid entities or mixed input.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.