skills/uipath/skills/uipath-feedback/Gen Agent Trust Hub

uipath-feedback

Fail

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions for installing the UiPath CLI by downloading a script from download.uipath.com and piping it directly to the shell (curl -fsSL https://download.uipath.com/uipath-cli/install.sh | bash). This matches the standard installation pattern for the vendor's official tooling.
  • [EXTERNAL_DOWNLOADS]: Fetches installation scripts (install.sh, install.ps1) from the uipath.com domain.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data, including user conversation history and local project files, to construct feedback reports.
  • Ingestion points: Conversation history (prompts) and project files (e.g., .flow, project.json, pyproject.toml) are read into the agent's context.
  • Boundary markers: The skill does not explicitly define delimiters for the captured content within the feedback description, though it uses structured headers.
  • Capability inventory: The skill uses Bash for command execution, Write for file management, and uses the uip CLI to send data over the network.
  • Sanitization: The skill implements detailed sanitization rules in the 'Sanitization Rules' section, including stripping secrets (tokens, passwords), redacting PII in paths, and truncating large files to mitigate data exposure risks.
Recommendations
  • HIGH: Downloads and executes remote code from: https://download.uipath.com/uipath-cli/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 15, 2026, 08:32 PM