ucp-identity-linking
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a technical guide for implementing OAuth 2.0 Authorization Code flows, correctly referencing industry-standard RFCs for secure authentication, metadata discovery, and token management.
- [EXTERNAL_DOWNLOADS]: The skill fetches live specifications and integration guides from Google's official developer portal and the ucp.dev documentation site. These are standard informational fetches for technical configuration and do not involve the execution of remote scripts.
- [INDIRECT_PROMPT_INJECTION]: The skill utilizes web search and fetch tools to retrieve current technical requirements from official documentation domains. While this creates a context window for external data, the risk is considered safe as it follows established development workflows for technical agents to stay updated with protocol specifications.
Audit Metadata