Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already convey the safety profile (readOnlyHint=false, destructiveHint=false). The description adds a key behavioral trait: it opens a UI rather than performing direct data operations, but it does not disclose what happens after the UI opens (e.g., side effects, interaction requirements, or response format). This is adequate but not rich, given annotations cover the mutation concern.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.