ucp-discount
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill utilizes WebSearch and WebFetch to retrieve technical specifications from ucp.dev. This is the intended primary purpose of the skill to ensure implementation accuracy but technically introduces a surface where external data is ingested into the agent context.
- Ingestion points: SKILL.md instructions for fetching live specs from ucp.dev.
- Boundary markers: Not present; the skill relies on the agent's ability to interpret technical documentation.
- Capability inventory: The skill uses Write, Edit, and Bash tools to implement the logic found in the specification.
- Sanitization: No specific filtering or sanitization of the retrieved documentation is required as it targets a specific technical domain.
Audit Metadata