ucp-dev-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides references to external documentation at ucp.dev and official GitHub repositories under the Universal-Commerce-Protocol organization for specification details and conformance testing.
- [INDIRECT_PROMPT_INJECTION]: The instructions direct the agent to perform web searches and fetch live documentation from ucp.dev to ensure it uses the latest specification values.
- Ingestion points: Web search results (site:ucp.dev) and external documentation URLs (SKILL.md).
- Boundary markers: Absent.
- Capability inventory: No executable code or dangerous tools are defined within this skill.
- Sanitization: Absent.
- [NO_CODE]: The skill contains only documentation and architectural patterns in markdown format without any accompanying scripts or executables.
Audit Metadata