registry / @uipath/codedagent-tool / 1.202.0

@uipath/codedagent-tool@1.202.0

Build, run, deploy, and manage AI Agents.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

The package has no lifecycle hooks and its observed process execution is gated behind explicit CLI use and configured tooling. No concrete malicious behavior was found.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs a codedagent CLI command or imports the library.

Impact

No confirmed malicious impact was established.

Mechanism

CLI commands dispatch to configured tooling; no malicious mechanism was identified.

AI rationale

The package has no lifecycle hooks and its observed process execution is gated behind explicit CLI use and configured tooling. No concrete malicious behavior was found.

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes a library entrypoint and CLI binary and contains no lifecycle hooks.
Commands are registered as user-invoked CLI actions.
The Python command runner requires a previously configured cached executable before it can run.
The bundled open helper validates that its target is a string.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 9 file(s), 526 KB of source, external domains: cloud.uipath.com, github.com, govcloud.uipath.us, npm.pkg.github.com, www.python.org

Source & flagged code

6 flagged

dist/tool-1makje55.jsView file

Lines 3934-3974javascript

3934 }

3935 getState().commandStart = performance.now();

3936}

3937function recordCommandDuration(durationMs) {

3938 if (!timingsEnabled()) {

3939 return;

3940 }

3941 getState().commandMs = durationMs;

3942}

3943// ../common/src/telemetry/proxy-http-agent.ts

3944var slot = singleton("ProxyAuthHttpsAgent");

3945

3946// ../common/src/telemetry/node-appinsights-telemetry-provider.ts

3947var providerSlot = singleton("TelemetryProvider");

3948

3949// ../common/src/telemetry/telemetry-spool.ts

3950var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

3951var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

3952

3953// ../common/src/telemetry/telemetry-init.ts

3954var telemetryInstanceSlot = singleton("TelemetryService");

3955var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

3956function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-1makje55.jsView on unpkg · L3954

3957 const existing = telemetryInstanceSlot.get();

3958 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

3959 return existing;

3960 }

3961 return;

3962}

3963function setGlobalTelemetryInstance(instance) {

3964 telemetryInstanceSlot.set(instance);

3965}

3966var _localTelemetryInstance;

3967function getTelemetryInstance() {

3968 const global = getGlobalTelemetryInstance();

3969 if (global)

3970 return global;

3971 if (!_localTelemetryInstance) {

3972 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

3973 setGlobalTelemetryInstance(_localTelemetryInstance);

3974 }

Lines 6834-6874javascript

6834async function getConfiguredEnvValue(fs2, name) {

6835 const processValue = process.env[name]?.trim();

6836 if (processValue) {

6837 return processValue;

6838 }

dist/index-sby22td6.jsView file

Lines 522-562javascript

522 subprocess.off("error", reject);

523 if (exitCode !== 0) {

524 reject(new Error(`Exited with code ${exitCode}`));

525

package.jsonView file

Lines 1-31json

2 "name": "@uipath/codedagent-tool",

3 "license": "SEE LICENSE IN LICENSE.txt",

4 "version": "1.202.0",

5 "description": "Build, run, deploy, and manage AI Agents.",

dist/tool-10newaay.jsView file

Lines 3166-3206javascript

3166});

3167function isHelpRequest(args) {

3168 return args.includes("--help") || args.includes("-h");

3169}

3170function

Source & flagged code

6 flagged · loading source

dist/tool-1makje55.jsView file

3954var telemetryInstanceSlot = singleton("TelemetryService"); L3955: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L3956: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-1makje55.jsView on unpkg · L3954

6854async function runUipathPythonCommand(args, options = {}) { const fs2 = getFileSystem(); const cacheFile = fs2.path.join(fs2.env.homedir(), UIPATH_HOME_DIR, getCacheFileName()); const setupHint = `Run 'uip ${options.commandPrefix ?? "codedagent"} setup' first to configure the environment. ` + "If you are using a virtual environment, activate it first."; const cache = await readCache(cacheFile); if (!cache?.uipathExePath) { return fail("python_not_configured", "Python not configured.", setupHint); }

Low

Ai Review Evidence

The Python command runner requires a previously configured cached executable before it can run.

dist/tool-1makje55.jsView on unpkg · L6854

dist/index-sby22td6.jsView file

Findings

2 High2 Medium8 Low

HighBase64 Obscured Urldist/tool-1makje55.js

HighSemantic Analysis Limiteddist/index-sby22td6.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/tool-10newaay.js

LowAi Review Evidencedist/tool-1makje55.js

LowAi Review Evidencedist/index-sby22td6.js

Affected versions and remediation

This report applies to @uipath/codedagent-tool@1.202.0.

See all versions of @uipath/codedagent-tool for other recorded verdicts.

Review the evidence and your use of @uipath/codedagent-tool@1.202.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:16:58.406Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code