uipath-knowledge-bundles

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill employs the uip CLI tool, which is a resource provided by the vendor (UiPath), to interact with Orchestrator and manage knowledge bundles. This behavior is consistent with the skill's intended purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to retrieve markdown documents from a remote Orchestrator environment to be used as agent context. * Ingestion points: Content is downloaded from Orchestrator to a local directory via the uip or kb download command as described in SKILL.md. * Boundary markers: There are no specific instructions or delimiters provided to protect the agent when it reads the downloaded markdown documents as context. * Capability inventory: The agent has access to Bash for CLI operations and Read/Write/Glob/Grep for local file system manipulation. * Sanitization: The skill does not mention any sanitization or validation processes for the downloaded markdown content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 10:22 PM