registry / @uipath/codedagent-tool / 1.202.1

@uipath/codedagent-tool@1.202.1

Build, run, deploy, and manage AI Agents.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Static inspection found no lifecycle hook or concrete malicious behavior. Process execution is tied to explicit CLI use and a configured local UiPath executable.

Static reason

One or more suspicious static signals were detected.

Trigger

A user invokes the codedagent-tool command.

Impact

No unconsented installation behavior, persistence, credential export, or destructive action was established.

Mechanism

It checks cached UiPath executable configuration before spawning the configured executable; no install-time hook was found.

AI rationale

Static inspection found no lifecycle hook or concrete malicious behavior. Process execution is tied to explicit CLI use and a configured local UiPath executable.

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package declares a CLI binary and has no npm lifecycle scripts.
The bundled launcher checks for a configured, existing UiPath executable before running it.
The bundled URL-opening helper constructs platform command arguments rather than executing at import time.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 9 file(s), 526 KB of source, external domains: cloud.uipath.com, github.com, govcloud.uipath.us, npm.pkg.github.com, www.python.org

Source & flagged code

5 flagged

dist/tool-73f5y4x8.jsView file

Lines 3934-3974javascript

3934 }

3935 getState().commandStart = performance.now();

3936}

3937function recordCommandDuration(durationMs) {

3938 if (!timingsEnabled()) {

3939 return;

3940 }

3941 getState().commandMs = durationMs;

3942}

3943// ../common/src/telemetry/proxy-http-agent.ts

3944var slot = singleton("ProxyAuthHttpsAgent");

3945

3946// ../common/src/telemetry/node-appinsights-telemetry-provider.ts

3947var providerSlot = singleton("TelemetryProvider");

3948

3949// ../common/src/telemetry/telemetry-spool.ts

3950var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

3951var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

3952

3953// ../common/src/telemetry/telemetry-init.ts

3954var telemetryInstanceSlot = singleton("TelemetryService");

3955var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

3956function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-73f5y4x8.jsView on unpkg · L3954

3957 const existing = telemetryInstanceSlot.get();

3958 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

3959 return existing;

3960 }

3961 return;

3962}

3963function setGlobalTelemetryInstance(instance) {

3964 telemetryInstanceSlot.set(instance);

3965}

3966var _localTelemetryInstance;

3967function getTelemetryInstance() {

3968 const global = getGlobalTelemetryInstance();

3969 if (global)

3970 return global;

3971 if (!_localTelemetryInstance) {

3972 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

3973 setGlobalTelemetryInstance(_localTelemetryInstance);

3974 }

Lines 6838-6878javascript

6838 }

6839 const envPath = fs2.path.join(fs2.env.cwd(), ENV_FILE_NAME);

6840 if (!await fs2.exists(envPath)) {

6841 return null;

6842

dist/index-sby22td6.jsView file

Lines 453-493javascript

453 }

454 if (is_wsl_default && options.target) {

455 options.target = await convertWslPathToWindows(options.target);

456 }

457 const encodedArguments = ["$ProgressPreference = 'SilentlyContinue';"

package.jsonView file

Lines 1-37json

2 "name": "@uipath/codedagent-tool",

3 "license": "SEE LICENSE IN LICENSE.txt",

4 "version": "1.202.1",

5 "description": "Build, run, deploy, and manage AI Agents.",

Source & flagged code

5 flagged · loading source

dist/tool-73f5y4x8.jsView file

3954var telemetryInstanceSlot = singleton("TelemetryService"); L3955: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L3956: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-73f5y4x8.jsView on unpkg · L3954

6858const cache = await readCache(cacheFile); if (!cache?.uipathExePath) { return fail("python_not_configured", "Python not configured.", setupHint); } if (!await fs2.exists(cache.uipathExePath)) { return fail("uipath_exe_missing", "uipath executable not found. Please install it using 'pip install uipath' or 'uv add uipath'.", setupHint

Low

Ai Review Evidence

The bundled launcher checks for a configured, existing UiPath executable before running it.

dist/tool-73f5y4x8.jsView on unpkg · L6858

dist/index-sby22td6.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

Findings

2 High2 Medium7 Low

HighBase64 Obscured Urldist/tool-73f5y4x8.js

HighSemantic Analysis Limiteddist/index-sby22td6.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/tool-73f5y4x8.js

LowAi Review Evidencedist/index-sby22td6.js

Affected versions and remediation

This report applies to @uipath/codedagent-tool@1.202.1.

See all versions of @uipath/codedagent-tool for other recorded verdicts.

Review the evidence and your use of @uipath/codedagent-tool@1.202.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:17:34.399Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code