Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations flag openWorldHint=true and destructiveHint=true, and the description adds the key behavioral consequence an agent needs: the link is public, anyone with it can see dishes and prices, and originals photos are excluded. It also implicitly explains the idempotentHint by noting it "returns the existing" link rather than minting duplicates. The gap is that it never says how to undo sharing (revoke_menu_share exists) or that sharing is externally observable and revocable, which matters for a destructive-hinted action.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.