registry / @uipath/agent-tool / 1.203.0
@uipath/agent-tool@1.203.0
cli plugin for creating and managing UiPath low-code agents
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe inspected source supports ordinary, user-invoked UiPath CLI authentication and solution upload; the scanner's Base64 and credential-routing signals did not establish hidden exfiltration. The package manifest has no install lifecycle hook, and the reviewed authentication path validates HTTPS authority and JWT issuer identity.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the CLI or configures authentication for a UiPath authority.
Impact
No confirmed credential theft, hidden redirection, or other attack surface was established.
Mechanism
The CLI validates HTTPS authority configuration, checks JWT issuer identity, and uses its token in the UiPath solution upload request.
AI rationale
The inspected source supports ordinary, user-invoked UiPath CLI authentication and solution upload; the scanner's Base64 and credential-routing signals did not establish hidden exfiltration. The package manifest has no install lifecycle hook, and the reviewed authentication path validates HTTPS authority and JWT issuer identity.
Evidence
package.jsondist/packager-tool-ad7m0jpd.jsdist/packager-tool-yjycd7ae.jsdist/index-h8cph72k.jsdist/packager-tool-qfh8a6md.js
Network endpoints2
alpha.uipath.com/studio_/backendcloud.uipath.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json describes a UiPath agent management CLI and has no lifecycle hook in its manifest.
- Authority URLs are explicitly configured by the user and must use HTTPS.
- JWT parsing checks that the token issuer matches the configured authority before saving credentials.
- The flagged Base64 decoding parses JWT claims; it does not establish a hidden network destination.
- The inspected authenticated request sends the bearer token in the UiPath solution upload flow.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
6 flagged · loading sourcedist/packager-tool-ad7m0jpd.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/packager-tool-ad7m0jpd.js:
if (loginStatus.loginStatus !== "Logged in" || !loginStatus.accessToken || !loginStatus.baseUrl || !loginStatus.organizationId) {
baseUrl: loginStatus.baseUrl,
const basePath = `${ctx.baseUrl}/${organizationId}/${tenantId}/agentsruntime_`;
Authorization: `Bearer ${ctx.accessToken}`,
await fs.writeFile(filePath, JSON.stringify(rows, null, 2));
await fs.writeFile(filePath, csvRows.join(`
async writeFile(filePath, data) {
await fs6.writeFile(filePath, data);
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/packager-tool-ad7m0jpd.jsView on unpkg2896sourceCode = this.opts.code.process(sourceCode, sch);
L2897: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
L2898: const validate = makeValidate(this, this.scope.get());
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/packager-tool-ad7m0jpd.jsView on unpkg · L2896dist/packager-tool-yjycd7ae.js
Findings
4 High2 Medium6 Low
HighCredential Redirect Persistencedist/packager-tool-ad7m0jpd.js
HighBase64 Obscured Urldist/packager-tool-yjycd7ae.js
HighSemantic Analysis Limiteddist/index-h8cph72k.js
HighPrevious Version Dangerous Deltadist/packager-tool-qfh8a6md.js
MediumNetwork
MediumEnvironment Vars
LowEvaldist/packager-tool-ad7m0jpd.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @uipath/agent-tool@1.203.0.
See all versions of @uipath/agent-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/agent-tool@1.203.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.