The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The planning.md file contains instructions for the agent to recommend that users use the sudo command to resolve permission errors when installing or updating the UiPath CLI tool. Promoting the use of elevated privileges for dynamic software installation is a high-risk practice.
[REMOTE_CODE_EXECUTION]: In planning.md (Step 0), a shell script is provided to automatically update the @uipath/cli package from the public npm registry. This execution of remote code at runtime is a potential attack vector and directly contradicts the "Critical Rule" 4 in SKILL.md, which prohibits the agent from installing or modifying the CLI. The skill also references a piped shell script (curl ... | bash) for manual installation by the user.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from sdd.md specification files. This data is used to define Case Management structures and generate JavaScript expressions (=js:) that are later executed. The skill also uses this data to compose "Purpose" briefs for other AI agents (e.g., uipath-agents). This provides a path for indirect injection attacks.
Ingestion points: sdd.md file content enters the agent's context as specified in planning.md Step 2.
Boundary markers: Present in create-inline-common.md Step 1b using "---BEGIN SDD CONTEXT---" and "---END SDD CONTEXT---" delimiters.
Capability inventory: The skill uses the Bash, Read, Write, Edit, and Agent tools.
Sanitization: No explicit sanitization or validation of untrusted specification content is described before its use in generating logic or sub-agent tasks.
[COMMAND_EXECUTION]: The skill makes extensive use of the Bash tool to perform filesystem operations, manage local caches, and interact with the UiPath CLI for metadata discovery and validation.
[DYNAMIC_EXECUTION]: The skill generates caseplan.case files that incorporate JavaScript expressions derived from user requirements. These expressions are evaluated by the target platform's execution engine at runtime.

uipath-maestro-case