uipath-vertical-solutions
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions for users to install or update the required UiPath CLI by executing shell scripts or PowerShell commands directly from the vendor's distribution domain (
download.uipath.com). These are standard installation patterns for the uipath-cli tool. - [EXTERNAL_DOWNLOADS]: The skill references external installation scripts (
install.shandinstall.ps1) hosted on the vendor's official infrastructure. These resources are required for the skill's primary functionality and originate from a trusted domain associated with the skill author. - [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface by processing external configuration files and data seeding templates.
- Ingestion points: Files like
deploy-config.jsonand CSV files in the./seeding/directory (referenced inSKILL.md). - Boundary markers: Not explicitly utilized in the prompt instructions for data interpolation.
- Capability inventory: The skill uses the
uipCLI to perform deployment operations, manage roles, and insert/update Data Fabric records based on the content of these files (referenced inSKILL.mdandreferences/verticals/fins-guide.md). - Sanitization: There is no explicit evidence of sanitization or validation of the content within the CSV or JSON files before processing.
Audit Metadata