registry / @uipath/admin-tool / 1.202.1
@uipath/admin-tool@1.202.1
Manage UiPath admin resources — Identity Server, Resource Catalog Service, Audit Service, VPN Gateway.
AI Security Review
scanned 28d ago · by lpm-firewall-aiStatic inspection found no lifecycle scripts or active malicious behavior. The bundled entrypoint is command registration code for UiPath administration.
Static reason
One or more suspicious static signals were detected.
Trigger
A host CLI must explicitly register and invoke its commands.
Impact
No install-time, import-time, persistence, credential-exfiltration, or destructive attack behavior was identified.
Mechanism
The module registers commands and uses an existing authenticated UiPath session for service operations.
AI rationale
Static inspection found no lifecycle scripts or active malicious behavior. The bundled entrypoint is command registration code for UiPath administration.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package metadata exposes only the bundled module entrypoint and contains no lifecycle hook.
- The bundle registers administrative CLI commands rather than running them on import.
- The resource client requires an existing logged-in UiPath session before making service requests.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
4 flagged · loading sourcedist/tool.jsView file
22902var telemetryInstanceSlot = singleton2("TelemetryService");
L22903: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L22904: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool.jsView on unpkg · L2290250339// src/tool.ts
var metadata3 = {
name: "admin-tool",
version: package_default10.version,
description: "Manage UiPath admin resources — users, groups, robot accounts, external apps, SMTP settings, ip addresses, roles, permissions, organizations, tenants, tags, audit events, and vpn gateway.",
commandPrefix: "admin"
};
var registerCommands8 = async (program3) => {
await registerCommands5(program3);
await
Low
Ai Review Evidence
The bundle registers administrative CLI commands rather than running them on import.
dist/tool.jsView on unpkg · L5033950030async function resolveConfig4(options) {
const status = await getLoginStatusAsync2({
ensureTokenValidityMinutes: options?.loginValidity
});
if (status.loginStatus !== "Logged in" || !status.baseUrl || !status.accessToken) {
throw new Error(status.hint ? `Not logged in. ${status.hint}` : "Not logged in. Run 'uip login' first.");
}
if (!status.organizationId) {
throw new Error("Organization ID not available. Ensure you are logged in with an organization context.");
}
cons
Findings
1 High2 Medium7 Low
HighBase64 Obscured Urldist/tool.js
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/tool.js
LowAi Review Evidencedist/tool.js
Affected versions and remediation
This report applies to @uipath/admin-tool@1.202.1.
See all versions of @uipath/admin-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/admin-tool@1.202.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.