acp-dev-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for secure development patterns, specifically focusing on payment processing and API integrity. It provides correct security advice such as using HMAC for webhook verification, rotating tokens, and redacting sensitive data from logs.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch documentation and specifications from OpenAI's official developer portal (
developers.openai.com) and search for documentation from Stripe and GitHub. These are trusted and well-known sources, and the references are intended for informational purposes. - [INDIRECT_PROMPT_INJECTION]: The skill defines how to process external data sources such as API responses and webhooks. While this defines an ingestion surface for potentially untrusted data, the instructions specifically mandate security measures like request signing and HMAC verification to mitigate injection and tampering risks.
Audit Metadata