Skip to content

fix(uipath-coded-apps): remove token handling guidance#401

Open
kab0rn wants to merge 2 commits intoUiPath:mainfrom
kab0rn:fix/coded-apps-avoid-direct-auth-curl
Open

fix(uipath-coded-apps): remove token handling guidance#401
kab0rn wants to merge 2 commits intoUiPath:mainfrom
kab0rn:fix/coded-apps-avoid-direct-auth-curl

Conversation

@kab0rn
Copy link
Copy Markdown

@kab0rn kab0rn commented Apr 27, 2026

Summary

  • Replace coded-apps token-handling guidance with a CLI-managed authentication rule.
  • Remove cached access-token environment variables from the file-sync reference.
  • Keep the workflow centered on uip login and supported uip codedapp commands.

Why

The skill should not teach agents to pass, print, source, or manually set cached access tokens. Coded app operations should stay on supported CLI authentication paths.

Fixes #334

Validation

  • rg -n "~/.uipath/.auth|UIPATH_ACCESS_TOKEN|source ~/.uipath|cat ~/.uipath|Authorization: Bearer|oauth2/applications|DeployCodedApp|curl\\b" skills/uipath-coded-apps returns no matches.
  • git diff --check
  • bash hooks/validate-skill-descriptions.sh skills/uipath-coded-apps/SKILL.md

The full smoke eval suite depends on the repository CI environment and private test secrets, so it is expected to run in GitHub Actions for this PR.

@kab0rn kab0rn force-pushed the fix/coded-apps-avoid-direct-auth-curl branch from ad97ec8 to eeb7fc2 Compare April 27, 2026 07:23
@kab0rn kab0rn marked this pull request as ready for review April 27, 2026 07:24
@kab0rn kab0rn changed the title Remove coded app token handling guidance fix(uipath-coded-apps): remove token handling guidance Apr 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[high] uipath-coded-apps: skill guides the agent to bypass uip with direct curl calls against ~/.uipath/.auth

3 participants