Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the behavioral burden, and it does disclose meaningful detail: SHA-256 key derivation and the base64 iv/ciphertext/tag return shape. It omits whether output is deterministic per input, how invalid or missing keys are handled, and any rate limits beyond the free-trial mention.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.