a2a-setup
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structural guidance for project setup and documentation retrieval. It contains code skeletons for Agent Cards and directory structures which are standard for developer tools.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch technical specifications and README files from well-known platforms like GitHub, PyPI, and npm, as well as the protocol's official domain
a2a-protocol.org. These references are appropriate for the task of software development and SDK installation. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process external documentation. While this represents a potential ingestion surface for untrusted content, the instructions target specific, relevant, and well-known domains (GitHub, PyPI, npm, a2a-protocol.org) for documentation-driven code generation, which is consistent with the skill's primary purpose.
Audit Metadata