ucp-checkout-a2a
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill is composed entirely of markdown documentation providing implementation guidance; it does not include any executable code, scripts, or binary files.
- [SAFE]: External links and instructions to fetch live specifications from
ucp.dev,google.github.io, and GitHub are legitimate technical references for the protocol described. - [SAFE]: The protocol data parts mentioned, such as payment credentials and merchant authorizations, are described within the context of the A2A messaging schema and do not involve the exposure of actual secrets or insecure data handling practices.
Audit Metadata