registry / @uipath/agent-tool / 1.201.0
@uipath/agent-tool@1.201.0
cli plugin for creating and managing UiPath low-code agents
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe scanner signals map to bundled CLI, authentication, telemetry, and cross-platform helper code. Source inspection found no install hook or concrete malicious data-flow chain.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the agent-tool CLI command.
Impact
No unconsented credential redirection, install-time action, or persistence was found.
Mechanism
User-invoked UiPath API operations and telemetry.
AI rationale
The scanner signals map to bundled CLI, authentication, telemetry, and cross-platform helper code. Source inspection found no install hook or concrete malicious data-flow chain.
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and contains no lifecycle scripts.
- Authenticated requests are made only after login status and required UiPath account fields are checked.
- The bundle includes a Base64-encoded telemetry connection string.
- The bundled platform helper can invoke PowerShell with an explicitly supplied command.
Evidence against
- No install-time execution, self-dependency, foreign agent configuration mutation, or persistence chain was found.
- The authenticated endpoint is derived from the configured login base URL, not a fixed unofficial gateway.
- Configured authorities must use HTTPS, and telemetry redacts tokens, credentials, URLs, and user paths.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
8 flagged · loading sourcedist/index-hsadteg4.jsView file
6import { fileURLToPath } from "node:url";
L7: import childProcess3 from "node:child_process";
L8: import fs5, { constants as fsConstants2 } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/index-hsadteg4.jsView on unpkg · L687L88: // ../../node_modules/powershell-utils/index.js
L89: import process2 from "node:process";
High
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index-hsadteg4.jsView on unpkgdist/index.umd.min-drpc57vn.js
Findings
7 High3 Medium4 Low
HighChild Processdist/index-hsadteg4.js
HighShelldist/index-hsadteg4.js
HighCredential Redirect Persistencedist/packager-tool-kwp8tznh.js
HighCommand Output Exfiltrationdist/packager-tool-kwp8tznh.js
HighCross File Remote Execution Contextdist/packager-tool-kwp8tznh.js
HighBase64 Obscured Urldist/packager-tool-gkvdytpj.js
HighSemantic Analysis Limiteddist/index-hsadteg4.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEvaldist/index.umd.min-drpc57vn.js
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @uipath/agent-tool@1.201.0.
See all versions of @uipath/agent-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/agent-tool@1.201.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.