skills/uipath/skills/uipath-functions/Gen Agent Trust Hub

uipath-functions

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The documentation references the uip CLI tool for project lifecycle management, including scaffolding (new), initialization (init), and deployment (pack, publish, push). These commands are standard utilities for UiPath platform development.
  • [EXTERNAL_DOWNLOADS]: The skill references the uipath Python SDK and common libraries like httpx and pydantic-settings as dependencies in pyproject.toml. These are legitimate packages for building integration logic and data transforms.
  • [DATA_EXFILTRATION]: The implementation examples demonstrate reading data from UiPath Assets and Buckets. This interaction is performed through the official vendor SDK using authenticated platform sessions, representing the intended use case for the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides templates for functions that ingest data via Pydantic models. While these functions handle external inputs, the instructions emphasize deterministic logic and typed schemas, which are standard security practices for data ingestion.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 09:17 PM
Security Audit — agent-trust-hub — uipath-functions