registry / @uipath/codedagent-tool / 1.196.0

@uipath/codedagent-tool@1.196.0

Build, run, deploy, and manage AI Agents.

AI Security Review

scanned 19d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Risky primitives are tied to an explicit UiPath CLI wrapper that discovers Python, caches a uipath executable path, forwards whitelisted commands, reads auth configuration, and contacts UiPath/telemetry services during user-invoked operations.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs codedagent-tool/codedagent subcommands or imports the init helper.

Impact

Runs configured local uipath executable and may update UiPath auth/cache files; no malicious behavior confirmed.

Mechanism

user-invoked UiPath Python CLI wrapper with auth/token refresh

Rationale

Static inspection shows a legitimate UiPath coded-agent CLI wrapper with no install-time execution and no unrelated exfiltration or persistence. Child process and network findings are package-aligned and user-invoked.

Evidence

package.jsonREADME.mddist/index.jsdist/tool.jsdist/init.js.env~/.uipath/.auth~/.uipath/.uipath-python-cache.json

Network endpoints4

cloud.uipath.com<authority>/identity_/connect/tokenwesteurope-5.in.applicationinsights.azure.com/westeurope.livediagnostics.monitor.azure.com/

@uipath/codedagent-tool@1.196.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code