uipath-human-in-the-loop
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill instructs the agent to access the sensitive local authentication file at
~/.uipath/.authto retrieve theUIPATH_ACCESS_TOKENand other session-related metadata. - [COMMAND_EXECUTION]: The skill performs several shell-based operations including binary path resolution using
npm root, project scaffolding usingrsync, and workflow validation via theuipCLI. It also usesnode -eto dynamically generate UUIDs for project identifiers. - [DATA_EXFILTRATION]: The skill uses retrieved bearer tokens to perform authenticated network requests to the UiPath Orchestrator API (
cloud.uipath.com). While directed at official vendor infrastructure, this pattern involves the automated handling and transmission of sensitive session data. - [INDIRECT_PROMPT_INJECTION]: The skill interprets various external project files (such as
.flow,caseplan.json, andaction-schema.json) to design and insert new workflow nodes, creating a potential surface for indirect injection. - Ingestion points: Project configuration and schema files containing external data.
- Boundary markers: No explicit use of delimiters or 'ignore' instructions for processed data was found.
- Capability inventory: File writes, network transmission of tokens, and shell command execution.
- Sanitization: The skill lacks explicit instructions for sanitizing or validating data read from external project files before using it to generate new workflow components.
Audit Metadata