uipath-knowledge-bundles
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs the
uipCLI tool, which is a resource provided by the vendor (UiPath), to interact with Orchestrator and manage knowledge bundles. This behavior is consistent with the skill's intended purpose. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to retrieve markdown documents from a remote Orchestrator environment to be used as agent context. * Ingestion points: Content is downloaded from Orchestrator to a local directory via the
uip or kb downloadcommand as described inSKILL.md. * Boundary markers: There are no specific instructions or delimiters provided to protect the agent when it reads the downloaded markdown documents as context. * Capability inventory: The agent has access toBashfor CLI operations andRead/Write/Glob/Grepfor local file system manipulation. * Sanitization: The skill does not mention any sanitization or validation processes for the downloaded markdown content before it is processed by the agent.
Audit Metadata