uipath-platform

Warn

Audited by Socket on Mar 30, 2026

1 alert found:

Anomaly
AnomalyLOW
references/resources/resources-guide.md

The fragment is documentation for a CLI tool that handles sensitive resources. While no malicious code is shown, there is a notable security risk in the documented pattern of passing secrets and credentials via command-line arguments, which can lead to credential leakage through shell history, process listings, and logs. Recommendations: avoid placing secrets in CLI params; instead use secure prompts, environment-scoped tokens, or secret managers; ensure the CLI sanitizes logs to exclude sensitive fields; consider masking or omitting sensitive values in all outputs. Overall malware risk is low, but the security risk is medium due to potential credential leakage in real-world usage.

Confidence: 65%Severity: 60%
Audit Metadata
Analyzed At
Mar 30, 2026, 01:23 AM
Package URL
pkg:socket/skills-sh/uipath%2Fskills%2Fuipath-platform%2F@83e87b733b0257786c8a28386bb595d61f1421d4