ap2-setup
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
uv pip installto download and install the AP2 package directly from thegoogle-agentic-commerceorganization's repository on GitHub (https://github.com/google-agentic-commerce/AP2.git@main). This is a standard installation procedure from a well-known technology provider's official source. - [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to retrieve live protocol overviews and sample code from external domains to guide the scaffolding process.
- Ingestion points: External content is retrieved from
https://ap2-protocol.org/andhttps://github.com/google-agentic-commerce/AP2usingWebFetchandWebSearchas specified inSKILL.md. - Boundary markers: No specific boundary markers or instructions to ignore embedded directives are provided for the data retrieved from external sources.
- Capability inventory: The skill uses the
BashandWritetools to execute installation commands and create project files based on the fetched instructions. - Sanitization: No validation or sanitization mechanisms are implemented for the external documentation before it is processed by the agent.
Audit Metadata