Ucp

What it does

This source provides a task-specific instruction workflow for Productivity & planning. Its source file is linked below so you can inspect the exact procedure, tools and dependencies. A full editorial review has not been completed.

Best for

Exploring Productivity & planning workflows with an agent. Confirm that the source matches your task and environment.

Tradeoffs and requirements

The automated catalog record does not establish task performance or runtime safety. Check supporting scripts and external services in the source before use.

Requires UCP CLI

Install from the source

Inspect the pinned source snapshot and its supporting files first. The command selects this skill through the open-source skills CLI. Node.js and agent-specific setup may be required. Installation can download code. Catalog ingestion never executes skill instructions or install scripts.

npx skills add https://github.com/Shopify/Shopify-AI-Toolkit/tree/a3d20f8dc284a2e8ae25272fa79520888abb5dcb/skills/ucp --skill ucp

Review pinned skill folder ↗ · CLI documentation ↗

After source review, use npx skills check and npx skills update to inspect and apply upstream updates. Re-check changed instructions before running them.

Safety & review signals

Static review only. This is not a security audit or a guarantee of safety.

SKILL.md text only; scripts, dependencies and runtime behavior not audited.

• Credential Reference — review the source context.
• Network Access — review the source context.
• Shell Or Package Install — review the source context.

Allowed tools declaration: Unknown. Runtime permissions and network behavior: Unknown.

Offline package integrity

A temporary folder-copy check, not an agent installation or runtime safety verdict.

8 files copied and checksummed from this exact source snapshot. No package code or installation scripts were executed.

Inventory SHA-256: 661c613e594ccd11534e3879309d859c80486a6d1c95ff50dc34022d3f8c23bf

AI Craft Pad Skill Score

86/100 · Metadata coverage 100% · Model 1.0

Scores summarize observable discovery signals. Popularity and repository activity apply to the whole repository. Unknown runtime safety earns no certification.

Documentation

100/100

100

Maintenance

100/100

100

License Clarity

100/100

100

Repository Health

100/100

100

Compatibility Evidence

80/100

80

Popularity

50/100

50

Originality

80/100

80

Static Safety

60/100

60

Supporting-file static inspection

Bounded source inspection, not a runtime security audit. This inspection does not execute code.

4 text files inspected at this exact repository snapshot. 3 files outside the inspection budget or type allowlist. Dependencies were not installed or independently audited.

• Network Client: 4 files — inspect context before use.
• Credential Handling: 2 files — inspect context before use.
• File Write Or Delete: 1 file — inspect context before use.
• Process Launch: 1 file — inspect context before use.

Absence of a pattern is not proof of safety. Permission needs and runtime behavior remain Unknown.