registry / @uipath/common / 1.201.0
@uipath/common@1.201.0
Common infrastructure needed by uip tools.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe flagged primitives are attributable to an opt-in-capable CLI support library: telemetry, redaction, execution-context classification, and caller-directed extension loading. Source inspection found no lifecycle hook, automatic payload execution, exfiltration of secrets, or mutation of projects or AI-agent controls.
Static reason
One or more suspicious static signals were detected.
Trigger
A consuming UiPath CLI explicitly initializes telemetry or requests a packager factory.
Impact
Telemetry metadata may be sent to the configured provider; no install-time execution, credential theft, persistence, or control-surface mutation was found.
Mechanism
Runtime telemetry, agent-context classification, and caller-directed module loading.
AI rationale
The flagged primitives are attributable to an opt-in-capable CLI support library: telemetry, redaction, execution-context classification, and caller-directed extension loading. Source inspection found no lifecycle hook, automatic payload execution, exfiltration of secrets, or mutation of projects or AI-agent controls.
Network endpoints2
westeurope-5.in.applicationinsights.azure.comwesteurope.livediagnostics.monitor.azure.com
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes library entry points and contains no install lifecycle hook.
- The node entry decodes a default Application Insights telemetry connection string at runtime.
- The browser entry detects coding-agent environment markers and dynamically imports a caller-supplied packager module.
Evidence against
- Telemetry is initialized through exported runtime functions, not at installation or import time.
- Agent detection only returns a classification used for telemetry context; it does not alter agent configuration.
- Telemetry properties redact tokens, credentials, URLs, home-directory names, emails, and long token-like strings.
- The sidecar process requires a separately configured entry path and pending telemetry envelopes.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcedist/index.browser.jsView file
23421async function importPackagerTool(specifier) {
L23422: const [importError, mod] = await catchError(import(specifier));
L23423: if (importError)
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.browser.jsView on unpkg · L2342123007var KNOWN_AGENTS = [
{ envVar: "CLAUDECODE", value: "1", id: "claude-code" },
{ envVar: "CURSOR_AGENT", value: "1", id: "cursor" },
{ envVar: "GEMINI_CLI", value: "1", id: "gemini-cli" },
{ envVar: "CODEX_THREAD_ID", id: "codex" },
{ envVar: "CODEX_SANDBOX", id: "codex" },
{ envVar: "AUGMENT_AGENT", value: "1", id: "augment" },
{ envVar: "CLINE_ACTIVE", value: "true", id: "cline" }
];
function detectAgentFromEnv(env2) {
for (const agent of KNOWN_AGENTS) {
const envValue = env2[agent.envVar];
if (agent.value !== undefined) {
if (envValue === agent.value)
Low
Ai Review Evidence
The browser entry detects coding-agent environment markers and dynamically imports a caller-supplied packager module.
dist/index.browser.jsView on unpkg · L2300723420var REGISTER_EXPORT = "registerPackagerFactories";
async function importPackagerTool(specifier) {
const [importError, mod] = await catchError(import(specifier));
if (importError)
return importError;
const register = mod?.[REGISTER_EXPORT];
Findings
1 High2 Medium7 Low
HighBase64 Obscured Urldist/index.js
MediumDynamic Requiredist/index.browser.js
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.browser.js
LowAi Review Evidencedist/index.browser.js
Affected versions and remediation
This report applies to @uipath/common@1.201.0.
See all versions of @uipath/common for other recorded verdicts.
- Review the evidence and your use of @uipath/common@1.201.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.