ucp-payment-terms
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to search for and fetch live specifications from external websites (ucp.dev) to inform code generation.
- Ingestion points: External web content retrieved through
WebSearchandWebFetchas instructed inSKILL.md. - Boundary markers: Absent. The data fetched from the web is not separated from the agent's execution context by any explicit delimiters or instructions to ignore embedded commands.
- Capability inventory: The agent is authorized to use several powerful tools including
Bash,Write, andEdit, which could be abused if the fetched specification contains malicious hidden instructions. - Sanitization: Absent. There are no requirements or logic provided to validate or sanitize the content fetched from the external specification pages before the agent processes them.
Audit Metadata