uipath-functions
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructs developers to use the UiPath Secret Vault pattern (Assets) for managing sensitive credentials, ensuring they are handled through official platform mechanisms rather than being hardcoded or exposed.
- [SAFE]: It enforces a security rule (JS Rule 9) to read platform coordinates (baseUrl, orgId, tenantId) from the authenticated context (
ctx.platform) instead of function input, effectively preventing potential redirection or SSRF attacks by malicious callers. - [SAFE]: The skill mandates the use of typed input and output schemas (Pydantic for Python, JSON Schema or
defineSchemafor JS/TS), providing a structured validation layer that mitigates data injection and schema confusion risks. - [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or unauthorized persistence mechanisms were detected. All described network operations and CLI commands are consistent with the intended development and deployment lifecycle of the UiPath platform.
- [SAFE]: All referenced external dependencies and repositories are from trusted sources, specifically the official UiPath GitHub repositories and standard public package registries (NPM/PyPI).
Audit Metadata