uipath-api-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by 'uipath' and focuses on legitimate development workflows using official vendor tools and infrastructure. All identified external resources (URLs, package names, and CLI commands) belong to the UiPath ecosystem or well-known technology documentation sites.
- [SAFE]: Documentation and templates utilize placeholders (e.g., '<REPLACE_WITH_VENDOR_CONNECTION_UUID>') for sensitive data, which is a secure practice to prevent credential exposure.
- [SAFE]: The skill uses the 'uip' CLI tool for project initialization, validation, and execution. These operations are part of the intended primary purpose of the skill and target official vendor registries (TypeCache and Integration Service Elements).
- [SAFE]: No evidence of prompt injection, data exfiltration, or malicious persistence was found. The use of JavaScript (JsInvoke) is constrained within the defined Serverless Workflow DSL and is used for standard automation logic.
Audit Metadata