uipath-human-in-the-loop
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: Employs the
uipCLI andnpmfor task orchestration, solution scaffolding, and flow validation. It also includes shell snippets for environment discovery and sourcing vendor configurations. - [EXTERNAL_DOWNLOADS]: Interacts with official
uipath.comdomains to search for and configure Action Center applications, which is essential for synchronizing with the vendor's cloud resources. - [CREDENTIALS_UNSAFE]: Accesses the official vendor configuration file located at
~/.uipath/.authto retrieve authentication tokens required for CLI operations. This is standard behavior for the UiPath development environment. - [INDIRECT_PROMPT_INJECTION]: Manages untrusted data ingestion via human reviewer inputs and sidecar schema files. The skill implements security controls by mandating validation through the
uip maestrotoolset. - Ingestion points: Human responses in forms and
.hitl.jsonschema definitions. - Boundary markers: Use of structured JSON data with explicitly defined field roles.
- Capability inventory: Execution of shell commands via the
uipCLI and local file system modifications. - Sanitization: Uses platform-native validation commands to ensure schema and wiring integrity prior to execution.
Audit Metadata