uipath-feedback
Fail
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions for installing the UiPath CLI by downloading a script from
download.uipath.comand piping it directly to the shell (curl -fsSL https://download.uipath.com/uipath-cli/install.sh | bash). This matches the standard installation pattern for the vendor's official tooling. - [EXTERNAL_DOWNLOADS]: Fetches installation scripts (
install.sh,install.ps1) from theuipath.comdomain. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data, including user conversation history and local project files, to construct feedback reports.
- Ingestion points: Conversation history (prompts) and project files (e.g.,
.flow,project.json,pyproject.toml) are read into the agent's context. - Boundary markers: The skill does not explicitly define delimiters for the captured content within the feedback description, though it uses structured headers.
- Capability inventory: The skill uses
Bashfor command execution,Writefor file management, and uses theuipCLI to send data over the network. - Sanitization: The skill implements detailed sanitization rules in the 'Sanitization Rules' section, including stripping secrets (tokens, passwords), redacting PII in paths, and truncating large files to mitigate data exposure risks.
Recommendations
- HIGH: Downloads and executes remote code from: https://download.uipath.com/uipath-cli/install.sh - DO NOT USE without thorough review
Audit Metadata