registry / @uipath/agent-tool / 1.202.1
@uipath/agent-tool@1.202.1
cli plugin for creating and managing UiPath low-code agents
AI Security Review
scanned 28d ago · by lpm-firewall-aiStatic inspection shows a first-party UiPath CLI with no registry lifecycle scripts and service calls aimed at cloud.uipath.com. Local process spawning is limited to documented CLI and browser-open helpers and does not form an install-time attack.
Static reason
One or more suspicious static signals were detected.
Trigger
The agent-tool binary runs only when the user invokes it and parses process.argv.
Impact
No unconsented install mutation, credential theft, or remote payload execution was established.
Mechanism
Command handlers talk to the configured UiPath cloud or Automation Suite host and may spawn local processes for CLI and browser-open behavior.
AI rationale
Static inspection shows a first-party UiPath CLI with no registry lifecycle scripts and service calls aimed at cloud.uipath.com. Local process spawning is limited to documented CLI and browser-open helpers and does not form an install-time attack.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json names a UiPath low-code agent CLI, sets bin to dist/index.js, and defines no preinstall, install, or postinstall scripts.
- Bundled packager code defaults the service base URL to https://cloud.uipath.com, matching the stated UiPath product.
- dist/index-h8cph72k.js imports node:child_process from the open and wsl-utils libraries used to launch a local browser, not an install-time payload.
Evidence against
- child_process and a schema compiler Function constructor appear in vendor bundles and are ordinary CLI and validation usage.
- Alpha and cloud.uipath.com URLs are product API hosts selected by the CLI, with no separate exfiltration sink or lifecycle trigger.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flagged · loading sourcedist/packager-tool-vjmpt0rh.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/packager-tool-vjmpt0rh.js:
if (loginStatus.loginStatus !== "Logged in" || !loginStatus.accessToken || !loginStatus.baseUrl || !loginStatus.organizationId) {
baseUrl: loginStatus.baseUrl,
const basePath = `${ctx.baseUrl}/${organizationId}/${tenantId}/agentsruntime_`;
Authorization: `Bearer ${ctx.accessToken}`,
await fs.writeFile(filePath, JSON.stringify(rows, null, 2));
await fs.writeFile(filePath, csvRows.join(`
async writeFile(filePath, data) {
await fs6.writeFile(filePath, data);
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/packager-tool-vjmpt0rh.jsView on unpkg2896sourceCode = this.opts.code.process(sourceCode, sch);
L2897: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
L2898: const validate = makeValidate(this, this.scope.get());
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/packager-tool-vjmpt0rh.jsView on unpkg · L289610227var DEFAULT_BASE_URL = "https://cloud.uipath.com";
var DEFAULT_AUTH_TIMEOUT_MS;
var init_constants = __esm(() => {
DEF
Findings
3 High2 Medium7 Low
HighCredential Redirect Persistencedist/packager-tool-vjmpt0rh.js
HighBase64 Obscured Urldist/packager-tool-b20zvjv7.js
HighSemantic Analysis Limiteddist/index-h8cph72k.js
MediumNetwork
MediumEnvironment Vars
LowEvaldist/packager-tool-vjmpt0rh.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/packager-tool-vjmpt0rh.js
Affected versions and remediation
This report applies to @uipath/agent-tool@1.202.1.
See all versions of @uipath/agent-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/agent-tool@1.202.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.