Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false, so the agent knows this is a safe, non-mutating read operation. The description adds the useful behavioral detail that 'Secrets are never returned', which is value beyond the annotations. With annotations covering the safety profile comprehensively, the description's additional disclosure of the no-secrets behavior is adequate but not extensive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.