uipath-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill requires carrying CLI/validation findings “verbatim” into the report and permits the user to paste PDD/project content, so any hardcoded secrets or API keys discovered by the CLI or pasted by the user would be output unchanged, enabling secret exfiltration.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The guardrail review step (Step 0) instructs the skill to fetch the UiPath SDK documentation at https://uipath.github.io/uipath-python/core/guardrails/ and https://uipath.github.io/uipath-python/langchain/guardrails/ at runtime and to use that fetched content as the authoritative mapping of validator_id → Python class/scope (i.e., it directly drives the review's guardrail recommendations and code-class names), so these external URLs are runtime dependencies controlling the skill's instructions.