registry / @uipath/flow-tool / 1.200.0

@uipath/flow-tool@1.200.0

Create, debug, and run UiPath Flow projects and jobs.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

The package has no install lifecycle hook and its observed network behavior is aligned with explicit package publishing and configured orchestrator access. No concrete malicious behavior was found.

Static reason

One or more suspicious static signals were detected.

Trigger

The user invokes the flow-tool command or its publishing functionality.

Impact

No unconsented execution, persistence, credential harvesting, or exfiltration was identified.

Mechanism

The tool packages and uploads selected files to configured package feeds or orchestrator services.

AI rationale

The package has no install lifecycle hook and its observed network behavior is aligned with explicit package publishing and configured orchestrator access. No concrete malicious behavior was found.

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package metadata exposes a module entry point and a command-line binary, with no lifecycle hook declared.
The command entry point constructs and parses the command-line program only when invoked.
The node bundle publishes caller-selected package files to a configured feed and sends an API key only when supplied for that destination.
The orchestrator request URL is built from the configured orchestrator URL.
The required ELK bundle is a bundled third-party layout library wrapper.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 126 file(s), 17.9 MB of source, external domains: alpha.uipath.com, api.example.com, bpmn.io, cloud.uipath.com, docs.uipath.com, fonts.googleapis.com, fonts.gstatic.com, github.com, govcloud.uipath.us, json-schema.org, npm.pkg.github.com, purl.org, raw.githubusercontent.com, schemas.microsoft.com, schemas.openxmlformats.org, serverlessworkflow.io, uipath.com, uipath.org, www.eclipse.org, www.omg.org, www.w3.org

Source & flagged code

7 flagged

dist/node-cb3gj7bj.jsView file

Lines 9-49javascript

9 ProjectTypes,

10 TargetFramework,

11 TemporaryStorageService,

12 ToolErrorCodes,

13 ToolResult,

14 ZipService,

15 toolsFactoryRepository,

16 translate

17} from "./packager-tool-kgkv7f24.js";

18import"./packager-tool-wckvcay0.js";

20// ../packager/project-packager/dist/node.js

21import { createRequire } from "node:module";

22import { randomUUID } from "node:crypto";

23import { existsSync } from "node:fs";

24import * as fs6 from "node:fs/promises";

25import * as os2 from "node:os";

26import * as path2 from "node:path";

27import process8 from "node:process";

28import path from "node:path";

29import { fileURLToPath } from "node:url";

30import childProcess3 from "node:child_process";

31import fs5, { constants as fsConstants2 } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/node-cb3gj7bj.jsView on unpkg · L29

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/node-cb3gj7bj.jsView on unpkg · L29

32import { promisify as promisify2 } from "node:util";

33import childProcess2 from "node:child_process";

34import fs4, { constants as fsConstants } from "node:fs/promises";

35import process2 from "node:process";

36import os from "node:os";

37import fs3 from "node:fs";

38import fs2 from "node:fs";

39import fs from "node:fs";

40import process3 from "node:process";

41import { Buffer as Buffer2 } from "node:buffer";

42import { promisify } from "node:util";

43import childProcess from "node:child_process";

44import { promisify as promisify6 } from "node:util";

45import process6 from "node:process";

46import { execFile as execFile6 } from "node:child_process";

47import { promisify as promisify3 } from "node:util";

48import process4 from "node:process";

49import { execFile as execFile3 } from "node:child_process";

Lines 2502-2542javascript

2502 getOptionValueSource(key) {

2503 return this._optionValueSources[key];

2504 }

2505 getOptionValueSourceWithGlobals(key) {

2506 let source;

2507 this._getCommandAndAncestors().forEach((cmd)

Lines 10398-10438javascript

10398 } : {}

10399 };

10400 return enriched;

10401 }

10402 generateId() {

10403 const bytes = new Uint8Array(8);

10404

dist/index.umd.min-drpc57vn.jsView file

Lines 1814-1854javascript

1814 constructor(e2) {

1815 var t2;

1816 let n2;

1817 this.refs = {}, this.dynamicAnchors = {}, typeof e2.schema == "object"

dist/packager-tool-emxmhxt6.jsView file

772var require_command = __commonJS((exports) => { L773: var EventEmitter = __require("node:events").EventEmitter; L774: var childProcess = __require("node:child_process");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/packager-tool-emxmhxt6.jsView on unpkg · L772

dist/elk.bundled-pydbzeez.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/elk.bundled-pydbzeez.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/node-cb3gj7bj.jsView file

29import { fileURLToPath } from "node:url"; L30: import childProcess3 from "node:child_process"; L31: import fs5, { constants as fsConstants2 } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/node-cb3gj7bj.jsView on unpkg · L29

2522} L2523: const execArgv = process9.execArgv ?? []; L2524: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/node-cb3gj7bj.jsView on unpkg · L2522

29Cross-file remote execution chain: dist/node-cb3gj7bj.js spawns dist/packager-tool-kgkv7f24.js; helper contains network access plus dynamic code execution. L29: import { fileURLToPath } from "node:url"; L30: import childProcess3 from "node:child_process"; L31: import fs5, { constants as fsConstants2 } from "node:fs/promises"; ... L1354: class CommanderError extends Error { L1355: constructor(exitCode, code, message) { L1356: super(message); ... L2108: this._outputConfiguration = { L2109: writeOut: (str) => process9.stdout.write(str), L2110: writeErr: (str) => process9.stderr.write(str), ... L3512: ]; L3513: executePowerShell.encodeCommand = (command) => Buffer2.from(command, "utf16le").toString("base64"); L3514: executePowerShell.escapeArgument = (value) => `'${String(value).replaceAll("'"

Findings

5 High3 Medium5 Low

HighChild Processdist/node-cb3gj7bj.js

HighShelldist/node-cb3gj7bj.js

HighCross File Remote Execution Contextdist/node-cb3gj7bj.js

HighBase64 Obscured Urldist/node-cb3gj7bj.js

HighSemantic Analysis Limiteddist/elk.bundled-pydbzeez.js

MediumDynamic Requiredist/packager-tool-emxmhxt6.js

MediumNetwork

MediumEnvironment Vars

LowEvaldist/index.umd.min-drpc57vn.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Affected versions and remediation

This report applies to @uipath/flow-tool@1.200.0.

See all versions of @uipath/flow-tool for other recorded verdicts.

Review the evidence and your use of @uipath/flow-tool@1.200.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:45:48.049Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code