Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnlyHint=false, destructiveHint=false, openWorldHint=true), and the description adds real value beyond them: it discloses that the result is a browser handoff rather than a direct connection, and it explicitly commits that OAuth secrets, cookies and passwords are never collected in chat. It stops short of saying what the handoff payload contains or what completes the flow.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.