uipath-solution
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the official command-line interface installer for the platform from the author's official download domain.
- Evidence: shell and PowerShell scripts are downloaded from download.uipath.com.
- [REMOTE_CODE_EXECUTION]: Directs the agent to fetch and run a project scaffolding tool using a package runner.
- Evidence: npx create-vite@latest is used for standalone app creation.
- [COMMAND_EXECUTION]: Performs automation lifecycle management through shell commands using the platform's command-line interface.
- Evidence: uses the uip solution CLI surface for all solution operations.
- [INDIRECT_PROMPT_INJECTION]: The skill involves reading and processing various automation project configuration files which could contain instructions intended to influence agent behavior.
- Ingestion points: Reads .uipx manifest, project.json, project.uiproj, and bindings_v2.json files.
- Boundary markers: None identified in the skill instructions.
- Capability inventory: Shell command execution capabilities via the uip CLI.
- Sanitization: No explicit content sanitization or validation of the ingested file contents is described in the skill instructions.
Audit Metadata