uipath-maestro-flow
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate technical documentation and a software development kit for creating automation workflows on the UiPath platform. The content is instructional and aligns with professional software engineering practices.
- [SAFE]: All external software dependencies and installation instructions refer to official vendor resources, such as the
@uipath/maestro-builder-sdkNPM package and theuipCLI tool, following standard development workflows. - [SAFE]: The documentation actively promotes security best practices, such as recommending against the use of administrative privileges (sudo) for package management and advocating for secure secret management via connection bindings rather than hardcoded credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill architecture facilitates the development of automations that process potentially untrusted data from external connectors (e.g., emails, webhook bodies) using AI agents. This risk is addressed through the use of structured data schemas, typed outputs, and explicit prompt templates that enforce operational boundaries on the AI components.
Audit Metadata