skills/uipath/skills/uipath-ixp/Gen Agent Trust Hub

uipath-ixp

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements strict operational boundaries via 'Critical Rules' which explicitly forbid the use of external network tools (curl, wget) and direct REST API calls, ensuring all operations are performed through the authenticated uip ixp CLI tool.
  • [SAFE]: To mitigate risks from indirect prompt injection (Category 8) while processing untrusted documents, the skill defines a rigorous review process. The agent is instructed to act as a 'reviewer' rather than an 'extractor,' performing field-by-field verification against the document content before issuing confirmation or correction commands.
  • [SAFE]: The skill handles file management in a safe manner, using a localized temporary directory (/tmp/ixp/) and specific instructions to avoid platform-specific path resolution issues (e.g., between Windows and bash environments).
  • [SAFE]: Destructive operations such as project, group, or document deletion are correctly documented with the requirement of mandatory confirmation flags (-y, --yes), preventing accidental data loss or unauthorized modifications.
  • [SAFE]: All external documentation links point to official docs.uipath.com domains, and the required CLI tool is a recognized resource from the verified vendor 'uipath'.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 08:12 PM
Security Audit — agent-trust-hub — uipath-ixp