uipath-maestro-case
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses official
uipCLI commands for various administrative and discovery tasks, such as registry searches, project validation, and solution management. These commands are part of the intended workflow for interacting with the UiPath ecosystem. - [COMMAND_EXECUTION]: A minimal
node -esubprocess is used specifically for generating version 4 UUIDs (e.g.,node -e "console.log(crypto.randomUUID())"). The skill's internal rules strictly forbid using this for file system modifications, ensuring that file operations remain transparent and auditable through the agent's built-in tools. - [EXTERNAL_DOWNLOADS]: The skill includes instructions to update the official vendor CLI (
@uipath/cli) from the public npm registry. This is a standard practice for ensuring compatibility and is performed using a well-known package manager targeting the author's own software. - [DATA_EXFILTRATION]: The skill provides functionality to upload Case Management solutions to UiPath Studio Web. This involves transmitting project artifacts to the vendor's cloud platform, which is the primary intended purpose of the publishing phase.
- [SAFE]: The skill implements a sophisticated 'phased execution' model with multiple hard-stop checkpoints. These checkpoints ensure that structural plans, implementation details, and high-impact operations (like debugging or publishing) require explicit user review and approval before proceeding.
Audit Metadata