manage-skill-flavors
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute standard maintenance and build commands within the repository, including
npm run skills:validate,npm run skills:build,npm run skills:pack, andnpm run skills:test. These commands are part of the intended development workflow for the UiPath skill repository. - [SAFE]: The documentation includes security advisories to prevent accidental public disclosure of packages by pinning the
publishConfigto a specific GitHub Packages registry and using scoped package configurations to mitigate dependency confusion attacks. - [SAFE]: The skill describes a transactional mechanism for building packages that involves temporary file modifications, including a recovery command (
npm run skills:recover) to restore canonical sources in case of an interrupted build, which protects the integrity of the source code. - [SAFE]: The build system is designed to automatically remove internal metadata markers (
<!--skill-flavor:...-->) before packaging, ensuring that build-time instructions do not reach final consumer artifacts.
Audit Metadata