Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose a meaningful multi-step side effect: the daemon generates the password itself, persists it, and types it into the page. However, it omits key behavioral facts — where the text is typed (focused field vs. active page), whether the stored credential is later retrievable via credential.list, and irreversibility.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.