registry / @uipath/api-workflow-tool / 1.201.0

@uipath/api-workflow-tool@1.201.0

Run UiPath API Workflows locally.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The static signals are consistent with a workflow-packaging CLI and its bundled dependencies. There is no lifecycle trigger or concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs a packager or publish command.

Impact

The tool can send selected package files to a configured destination.

Mechanism

User-directed package publishing and URL opening.

AI rationale

The static signals are consistent with a workflow-packaging CLI and its bundled dependencies. There is no lifecycle trigger or concrete malicious behavior.

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest has no lifecycle scripts and only exports distributed modules.
The flagged child-process and Base64 code belongs to a vendored URL-opening helper, not a decoded remote endpoint.
Network calls publish user-selected package files to configured feed or Orchestrator URLs.
The node packager is dynamically loaded only while a packager command is run.

Evidence against

No install-time execution, self-dependency, credential harvesting, or covert endpoint was found.
No confirmed persistence, destructive action, remote payload execution, or AI-agent configuration write was found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 25 file(s), 5.06 MB of source, external domains: alpha.uipath.com, cloud.uipath.com, fonts.googleapis.com, fonts.gstatic.com, github.com, govcloud.uipath.us, json-schema.org, momentjs.com, npm.pkg.github.com, purl.org, raw.githubusercontent.com, schemas.microsoft.com, schemas.openxmlformats.org, serverlessworkflow.io, uipath.com, www.w3.org

Source & flagged code

7 flagged

dist/node-mcg2g1ts.jsView file

Lines 8-48javascript

8 ProjectTypes,

9 TargetFramework,

10 TemporaryStorageService,

11 ToolErrorCodes,

12 ToolResult,

13 ZipService,

14 toolsFactoryRepository,

15 translate

16} from "./packager-tool-h1tyrbff.js";

17import"./packager-tool-wckvcay0.js";

19// ../packager/project-packager/dist/node.js

20import { createRequire } from "node:module";

21import fs7 from "node:fs";

22import fs22 from "node:fs";

23import process22 from "node:process";

24import os3 from "node:os";

25import fs32 from "node:fs";

26import process32 from "node:process";

27import { Buffer as Buffer22 } from "node:buffer";

28import { promisify as promisify7 } from "node:util";

29import childProcess4 from "node:child_process";

30import { promisify as promisify22 } from "node:util";

High

Child Process

Package source references child process execution.

dist/node-mcg2g1ts.jsView on unpkg · L28

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/node-mcg2g1ts.jsView on unpkg · L28

31import childProcess22 from "node:child_process";

32import fs42, { constants as fsConstants3 } from "node:fs/promises";

33import { promisify as promisify32 } from "node:util";

34import process42 from "node:process";

35import { execFile as execFile32 } from "node:child_process";

36import process52 from "node:process";

37import { promisify as promisify42 } from "node:util";

38import { execFile as execFile42, execFileSync as execFileSync2 } from "node:child_process";

39import { promisify as promisify52 } from "node:util";

40import { execFile as execFile52 } from "node:child_process";

41import { promisify as promisify62 } from "node:util";

42import process62 from "node:process";

43import { execFile as execFile62 } from "node:child_process";

44import process72 from "node:process";

45import process82 from "node:process";

46import path3 from "node:path";

47import { fileURLToPath as fileURLToPath2 } from "node:url";

48import childProcess32 from "node:child_process";

Lines 154-194javascript

154 if (isInsideContainer()) {

155 return false;

156 }

157 return true;

158 }

159 try {

160 if (fs3.readFileSync

Lines 11572-11612javascript

11572 };

11573 return enriched;

11574 }

11575 generateId() {

11576 const bytes = new Uint8Array(8);

11577 let hex

dist/index.umd.min-drpc57vn.jsView file

Lines 1814-1854javascript

1814 constructor(e2) {

1815 var t2;

1816 let n2;

1817 this.refs = {}, this.dynamicAnchors = {}, typeof e2.schema == "object"

dist/index-hsadteg4.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-hsadteg4.jsView on unpkg

package.jsonView file

Lines 1-30json

2 "name": "@uipath/api-workflow-tool",

3 "license": "MIT",

4 "version": "1.201.0",

5 "description": "Run UiPath API Workflows locally.",

Source & flagged code

7 flagged · loading source

dist/node-mcg2g1ts.jsView file

28import { promisify as promisify7 } from "node:util"; L29: import childProcess4 from "node:child_process"; L30: import { promisify as promisify22 } from "node:util";

High

Child Process

Package source references child process execution.

dist/node-mcg2g1ts.jsView on unpkg · L28

174var execFile; L175: var powerShellPath = () => `${process3.env.SYSTEMROOT || process3.env.windir || String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`; L176: var executePowerShell = async (command, options = {}) => {

High

Shell

Package source references shell execution.

dist/node-mcg2g1ts.jsView on unpkg · L174

28Cross-file remote execution chain: dist/node-mcg2g1ts.js spawns dist/packager-tool-h1tyrbff.js; helper contains network access plus dynamic code execution. L28: import { promisify as promisify7 } from "node:util"; L29: import childProcess4 from "node:child_process"; L30: import { promisify as promisify22 } from "node:util"; ... L198: ]; L199: executePowerShell.encodeCommand = (command) => Buffer2.from(command, "utf16le").toString("base64"); L200: executePowerShell.escapeArgument = (value) => `'${String(value).replaceAll("'", "''")}'`; ... L237: const command = String.raw`(Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice").ProgId`; L238: const { stdout } = await executePowerShell(command, { powerShellPath: psPath }); L239: return st

Findings

5 High2 Medium5 Low

HighChild Processdist/node-mcg2g1ts.js

HighShelldist/node-mcg2g1ts.js

HighCross File Remote Execution Contextdist/node-mcg2g1ts.js

HighBase64 Obscured Urldist/node-mcg2g1ts.js

HighSemantic Analysis Limiteddist/index-hsadteg4.js

MediumNetwork

MediumEnvironment Vars

LowEvaldist/index.umd.min-drpc57vn.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to @uipath/api-workflow-tool@1.201.0.

See all versions of @uipath/api-workflow-tool for other recorded verdicts.

Review the evidence and your use of @uipath/api-workflow-tool@1.201.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-07 13:35:29.010Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code