registry / @uipath/skills / 1.197.1

@uipath/skills@1.197.1

UiPath agent skills for Claude Code, Codex, Cursor, Copilot, Gemini and OpenCode — RPA, UI automation, UI testing, coded agents/apps/workflows, and troubleshooting. Distributed as the UiPath Claude Code plugin.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 20 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 15 file(s), 293 KB of source, external domains: acme.api.uipath.com

Source & flagged code

13 flagged

skills/uipath-coded-apps/assets/scripts/dashboards/lifecycle.mjsView file

Lines 1-33javascript

1// Project-lifecycle utilities for the dashboard build pipeline — versioning,

2// dependency pre-warm, SDK-version check, and dev-server teardown. Extracted from

3// build-dashboard.mjs to keep that file focused on generation + orchestration.

4//

5// These functions depend only on small primitives (emit/log/writeAtomic) and a few

6// constants from build-dashboard.mjs; they never call the widget/view generators, so

7// there is no tight coupling. (The import from build-dashboard.mjs forms a benign

8// runtime cycle — every cross-reference is used inside a function body, never at

Source & flagged code

13 flagged · loading source

skills/uipath-coded-apps/assets/scripts/dashboards/lifecycle.mjsView file

13import { pathToFileURL } from 'url' L14: import { execSync } from 'child_process' L15: import { createConnection } from 'net'

High

Child Process

Package source references child process execution.

skills/uipath-coded-apps/assets/scripts/dashboards/lifecycle.mjsView on unpkg · L13

skills/uipath-coded-apps/scripts/validate-action-schema.jsView file

35L36: const fs = require('fs'); L37:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

skills/uipath-coded-apps/scripts/validate-action-schema.jsView on unpkg · L35

skills/uipath-coded-apps/assets/scripts/dashboards/build-dashboard.mjsView file

427try { L428: execSync('npx tsc -p tsconfig.metrics.json', { cwd: projectPath, stdio: 'pipe' }) L429: return { ok: true }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

skills/uipath-coded-apps/assets/scripts/dashboards/build-dashboard.mjsView on unpkg · L427

hooks/suggest-permissions.shView file

•path = hooks/suggest-permissions.sh kind = build_helper sizeBytes = 1651 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/suggest-permissions.shView on unpkg

skills/uipath-coded-apps/assets/fixtures/governance-dashboard-starter-kit.tar.gzView file

•path = skills/uipath-coded-apps/assets/fixtures/governance-dashboard-starter-kit.tar.gz kind = high_entropy_blob sizeBytes = 49700 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/uipath-coded-apps/assets/fixtures/governance-dashboard-starter-kit.tar.gzView on unpkg

•path = skills/uipath-coded-apps/assets/fixtures/governance-dashboard-starter-kit.tar.gz kind = payload_in_excluded_dir sizeBytes = 49700 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/uipath-coded-apps/assets/fixtures/governance-dashboard-starter-kit.tar.gzView on unpkg

•path = skills/uipath-coded-apps/assets/fixtures/governance-dashboard-starter-kit.tar.gz kind = compressed_blob sizeBytes = 49700 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

skills/uipath-coded-apps/assets/fixtures/governance-dashboard-starter-kit.tar.gzView on unpkg

skills/uipath-rpa/references/activity-docs/UiPath.NetIQeDirectory.Activities/1.6/coded/examples.mdView file

39patternName = generic_password severity = medium line = 39 matchedText = password...3!",

Medium

Secret Pattern

Hardcoded password in skills/uipath-rpa/references/activity-docs/UiPath.NetIQeDirectory.Activities/1.6/coded/examples.md

skills/uipath-rpa/references/activity-docs/UiPath.NetIQeDirectory.Activities/1.6/coded/examples.mdView on unpkg · L39

skills/uipath-rpa/references/activity-docs/UiPath.System.Activities/25.10/coded/examples.mdView file

128patternName = generic_password severity = medium line = 128 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in skills/uipath-rpa/references/activity-docs/UiPath.System.Activities/25.10/coded/examples.md

skills/uipath-rpa/references/activity-docs/UiPath.System.Activities/25.10/coded/examples.mdView on unpkg · L128

144patternName = generic_password severity = medium line = 144 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in skills/uipath-rpa/references/activity-docs/UiPath.System.Activities/25.10/coded/examples.md

skills/uipath-rpa/references/activity-docs/UiPath.System.Activities/25.10/coded/examples.mdView on unpkg · L144

skills/uipath-rpa/references/activity-docs/UiPath.AmazonWebServices.Activities/2.9/coded/examples.mdView file

251patternName = generic_password severity = medium line = 251 matchedText = password...3!",

Medium

Secret Pattern

Hardcoded password in skills/uipath-rpa/references/activity-docs/UiPath.AmazonWebServices.Activities/2.9/coded/examples.md

skills/uipath-rpa/references/activity-docs/UiPath.AmazonWebServices.Activities/2.9/coded/examples.mdView on unpkg · L251

skills/uipath-rpa/references/activity-docs/UiPath.AzureActiveDirectory.Activities/1.6/coded/examples.mdView file

222patternName = generic_password severity = medium line = 222 matchedText = password...6!",

Medium

Secret Pattern

Hardcoded password in skills/uipath-rpa/references/activity-docs/UiPath.AzureActiveDirectory.Activities/1.6/coded/examples.md

skills/uipath-rpa/references/activity-docs/UiPath.AzureActiveDirectory.Activities/1.6/coded/examples.mdView on unpkg · L222

skills/uipath-rpa/references/activity-docs/UiPath.ActiveDirectory.Activities/1.7/coded/examples.mdView file

39patternName = generic_password severity = medium line = 39 matchedText = password...3!",

Medium

Secret Pattern

Hardcoded password in skills/uipath-rpa/references/activity-docs/UiPath.ActiveDirectory.Activities/1.7/coded/examples.md

skills/uipath-rpa/references/activity-docs/UiPath.ActiveDirectory.Activities/1.7/coded/examples.mdView on unpkg · L39

Findings

5 High11 Medium4 Low

HighChild Processskills/uipath-coded-apps/assets/scripts/dashboards/lifecycle.mjs

HighShell

HighRuntime Package Installskills/uipath-coded-apps/assets/scripts/dashboards/build-dashboard.mjs

HighShips High Entropy Blobskills/uipath-coded-apps/assets/fixtures/governance-dashboard-starter-kit.tar.gz

HighPayload In Excluded Dirskills/uipath-coded-apps/assets/fixtures/governance-dashboard-starter-kit.tar.gz

MediumDynamic Requireskills/uipath-coded-apps/scripts/validate-action-schema.js

MediumEnvironment Vars

MediumShips Build Helperhooks/suggest-permissions.sh

MediumShips Compressed Blobskills/uipath-coded-apps/assets/fixtures/governance-dashboard-starter-kit.tar.gz

MediumStructural Risk Force Deep Review

MediumSecret Patternskills/uipath-rpa/references/activity-docs/UiPath.NetIQeDirectory.Activities/1.6/coded/examples.md

MediumSecret Patternskills/uipath-rpa/references/activity-docs/UiPath.System.Activities/25.10/coded/examples.md

MediumSecret Patternskills/uipath-rpa/references/activity-docs/UiPath.AmazonWebServices.Activities/2.9/coded/examples.md

MediumSecret Patternskills/uipath-rpa/references/activity-docs/UiPath.AzureActiveDirectory.Activities/1.6/coded/examples.md

MediumSecret Patternskills/uipath-rpa/references/activity-docs/UiPath.ActiveDirectory.Activities/1.7/coded/examples.md

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

skills/uipath-coded-apps/assets/scripts/dashboards/build-dashboard.mjsView file

Lines 407-447javascript

407}

408

409export function hashContent(content) {

410 return createHash('sha256').update(content).digest('hex').slice(0, 16)

411}

412

413export function toPascalCase(str) {

414 return str.split('-').map(w => w[0].toUpperCase() + w.slice(1)).join('')

415}

416

417// ── Pre-warm ───────────────────────────────────────────────────────────────────

418

419/**

420 * Stage A — isolated type-check of the agent-written metric modules, before any

421 * widget is generated. Fast (no React graph) and maps errors directly to the

422 * offending src/metrics/<name>.ts file.

423 * @param {string} projectPath

424 * @returns {{ ok: true } | { ok: false, errors: string[], files: string[] }}

425 */

426export function runMetricsTypecheck(projectPath) {

427 try {

428 execSync('npx tsc -p tsconfig.metrics.json', { cwd: projectPath, stdio: 'pipe' })

429 return { ok: true }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

skills/uipath-coded-apps/assets/scripts/dashboards/build-dashboard.mjsView on unpkg · L427

430 } catch (e) {

431 const out = (e.stdout?.toString() ?? '') + (e.stderr?.toString() ?? '')

432 const errors = out.split('\n').filter(l => l.includes('error TS')).slice(0, 20)

433 const files = [...new Set((out.match(/src[/\\]metrics[/\\][\w-]+\.ts/g) ?? []).map(p => p.replace(/\\/g, '/')))]

434 return { ok: false, errors, files }

435 }

436}

437

438// ── Event streaming ────────────────────────────────────────────────────────────

439

440/**

441 * Emit a structured event line to stdout (or a custom writer for testing).

442 * @param {string} type - Must be one of KNOWN_EVENTS

443 * @param {object|null} [payload=null]

444 * @param {{ write: (s: string) => void }} [writer=process.stdout]

445 */

446export function emit(type, payload = null, writer = process.stdout) {

447 const line = payload != null ? `${type}:${JSON.stringify(payload)}` : type

skills/uipath-rpa/references/activity-docs/UiPath.System.Activities/25.10/coded/examples.mdView file

Lines 108-164markdown

108 public class ArchiveWorkflow : CodedWorkflow

109 {

110 [Workflow]

111 public void Execute()

112 {

113 // Get file references

114 IResource file1 = system.GetResourceForLocalPath(@"C:\Reports\report1.pdf", PathType.File);

115 IResource file2 = system.GetResourceForLocalPath(@"C:\Reports\report2.pdf", PathType.File);

116

117 // Compress files into a zip

118 ILocalResource zipFile = system.CompressZipFiles(

119 new List<IResource> { file1, file2 },

120 @"C:\Archives\reports.zip"

121 );

122 Log($"Archive created: {zipFile.FullPath}");

123

124 // Compress with password and options

125 ILocalResource secureZip = system.CompressZipFiles(

126 new List<IResource> { file1, file2 },

127 @"C:\Archives\secure_reports.zip",

128 password: "MyPassword123",

Medium

Secret Pattern

Hardcoded password in skills/uipath-rpa/references/activity-docs/UiPath.System.Activities/25.10/coded/examples.md

skills/uipath-rpa/references/activity-docs/UiPath.System.Activities/25.10/coded/examples.mdView on unpkg · L128

129 compressionLevel: ArchiveCompressionLevel.Optimal,

130 codePage: CodePages.UTF8,

131 overrideExistingFile: true

132 );

133

134 // Extract a zip file

135 IResource zipResource = system.GetResourceForLocalPath(@"C:\Archives\reports.zip", PathType.File);

136 ILocalResource[] extracted = system.ExtractUnzipFiles(zipResource, @"C:\Extracted");

137 Log($"Extracted {extracted.Length} files.");

138

139 // Extract with password to a dedicated subfolder

140 ILocalResource[] secureExtracted = system.ExtractUnzipFiles(

141 system.GetResourceForLocalPath(@"C:\Archives\secure_reports.zip", PathType.File),

142 @"C:\Extracted",

143 extractToADedicatedFolder: true,

144 password: "MyPassword123",

Medium

Secret Pattern

Hardcoded password in skills/uipath-rpa/references/activity-docs/UiPath.System.Activities/25.10/coded/examples.md

skills/uipath-rpa/references/activity-docs/UiPath.System.Activities/25.10/coded/examples.mdView on unpkg · L144

145 codePage: CodePages.UTF8

146 );

147 }

148 }

149}

150```

151

152---

153

154## DataTable Operations

155

156### Build, Sort, and Manipulate DataTables

157

158```csharp

159using System.Data;

160

161namespace MyProject

162{

163 public class DataTableWorkflow : CodedWorkflow

164 {