skills/uipath/skills/uipath-functions/Gen Agent Trust Hub

uipath-functions

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructs developers to use the UiPath Secret Vault pattern (Assets) for managing sensitive credentials, ensuring they are handled through official platform mechanisms rather than being hardcoded or exposed.
  • [SAFE]: It enforces a security rule (JS Rule 9) to read platform coordinates (baseUrl, orgId, tenantId) from the authenticated context (ctx.platform) instead of function input, effectively preventing potential redirection or SSRF attacks by malicious callers.
  • [SAFE]: The skill mandates the use of typed input and output schemas (Pydantic for Python, JSON Schema or defineSchema for JS/TS), providing a structured validation layer that mitigates data injection and schema confusion risks.
  • [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or unauthorized persistence mechanisms were detected. All described network operations and CLI commands are consistent with the intended development and deployment lifecycle of the UiPath platform.
  • [SAFE]: All referenced external dependencies and repositories are from trusted sources, specifically the official UiPath GitHub repositories and standard public package registries (NPM/PyPI).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 01:28 AM