registry / @uipath/data-fabric-tool / 1.196.0

@uipath/data-fabric-tool@1.196.0

Manage Data Fabric entities and records.

AI Security Review

scanned 19d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime behavior is a user-invoked UiPath Data Fabric CLI that uses authenticated UiPath SDK calls, optional telemetry, and explicit file upload/download operations.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the data-fabric-tool CLI commands.

Impact

User-requested Data Fabric CRUD/file actions; no evidence of credential theft, persistence, destructive local actions, or unconsented execution.

Mechanism

Authenticated UiPath Data Fabric API client operations

Rationale

Static inspection shows a scoped UiPath Data Fabric CLI with no lifecycle hook, no hidden payload, and network/file behavior aligned to user-invoked commands and bundled UiPath authentication/SDK code. Scanner hits for shell, base64, env vars, and fetch are explained by bundled open/default-browser/auth/SDK/telemetry dependencies rather than malicious package logic.

Evidence

package.jsondist/index.jsdist/tool.jssrc/index.tssrc/tool.tssrc/utils/sdk-client.tssrc/utils/input.tssrc/commands/files.tssrc/commands/records.tssrc/commands/entities.tssrc/commands/choice-sets.tssrc/utils/output.tsuser-provided --file pathsuser-provided --destination path.uipath/.auth

@uipath/data-fabric-tool@1.196.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code