Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive and open-world, so the safety profile is covered. The description adds two genuinely useful facts beyond them: it calls an external provider (OpenIBAN) and it returns bank/BIC metadata rather than a bare boolean. It stops short of saying what happens on an invalid IBAN (error vs. valid=false).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.