Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructive/idempotent/openWorld, and the description adds real context beyond them: the manage:accounts permission requirement, the confirm-gated preview that changes nothing, the fact that existing profiles are reused, and that an interrupted run leaves an unconfirmed state. That is substantive behavioral disclosure, with no contradiction of annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.