Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations by disclosing that the link grants anonymous public download access, that it requires Read and Share permissions, and the full set of conditions under which the link dies (grant revoked/expired, Read or Share removed, org disables share links). This is the kind of auth and lifecycle context an agent genuinely needs before creating a public link.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.