uipath-maestro-flow
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the official UiPath CLI using
npm install -g @uipath/cli@latest. This refers to a trusted package from a well-known vendor (UiPath) on the standard npm registry. - [COMMAND_EXECUTION]: The skill makes extensive use of the
Bashtool to executeuipCLI subcommands for project initialization, registry management, and deployment. It also uses localized Python snippets to process JSON configuration files within the workspace, all of which are aligned with its core purpose of automation management. - [PROMPT_INJECTION]: A static analysis flag was triggered for
references/author/plugins/ixp/impl.mdregarding a potential policy bypass. A manual audit confirms this is a false positive; the text actually instructs the agent to invoke a sibling skill specifically because that skill contains 'guardrails this skill does not,' thereby reinforcing security boundaries rather than attempting to bypass them. - [SAFE]: The skill adheres to a 'secure by default' posture, requiring explicit user consent for real-world execution (
flow debug), forbidding the hand-authoring of sensitive configuration envelopes, and relying on official vendor-provided CLI tools for platform interactions.
Audit Metadata