The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the UiPath.Upgrade.Cli.zip archive from download.uipath.com. As the skill is authored by the same vendor (UiPath), this is a fetch from a legitimate resource.
[COMMAND_EXECUTION]: The skill executes the downloaded UiPath.Upgrade.exe and various uip rpa commands (build, run, validate) to perform the migration and verification. It also runs local utility scripts using node and interacts with system tools like tar, reg.exe, and powershell for installation and configuration.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from existing RPA projects, which serves as an attack surface.
Ingestion points: Reads configuration from project.json, logic and annotations from .xaml files, and diagnostic data from SARIF logs. It also follows external links found in [PostMigration Action Required] annotations.
Boundary markers: Implements Rule 12 ("Mark every edit") to annotate changes and uses specific guides (e.g., sarif-triage-guide.md) to scope data processing.
Capability inventory: The skill can execute the migrated RPA project (uip rpa run), write to the filesystem, and execute the upgrade tool.
Sanitization: Employs guide-based validation and requires manual user confirmation before performing critical actions like running the migrated project.
[DYNAMIC_EXECUTION]: The skill runs provided JavaScript utility scripts (ensure-migrator.mjs, summarize-sarif.mjs, resolve-package-lines.mjs) using the node runtime to handle logic such as SARIF parsing and tool acquisition.

uipath-activity-migrator