registry / @uipath/flow-tool / 1.202.0

@uipath/flow-tool@1.202.0

Create, debug, and run UiPath Flow projects and jobs.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Static inspection shows a first-party UiPath Flow CLI whose shell and environment use is tied to explicit user commands and local packaging. There is no lifecycle script, self-install chain, or covert exfiltration path.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs the flow-tool binary or imports the library entrypoints.

Impact

No unconsented install-time mutation, credential theft, or remote code execution was found.

Mechanism

Command registration, local file and project packaging, and optional Windows registry or dotnet version checks run only as part of that CLI.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json names @uipath/flow-tool 1.202.0 as a UiPath Flow CLI, exports dist entrypoints, and defines only the flow-tool bin with no install lifecycle scripts.
dist/packager-tool-m056vsmy.js uses execFileSync only to query the Windows registry when the platform is win32, as part of the CLI runtime.
dist/node-yz5tz1jx.js calls execSync for dotnet --version as a local tooling check inside the packager, not at install time.
dist/elk.bundled-vpsbxz0p.js is the Eclipse Layout Kernel graph layout bundle and constructs a worker only when a worker URL or factory is supplied.

Evidence against

Bundled modules import node:child_process and read process environment variables for logging, auth, and packaging, but only after the user runs the CLI.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStrings

Source & flagged code

7 flagged

dist/packager-tool-m056vsmy.jsView file

Lines 710-750javascript

710 });

711 similar.sort((a, b) => a.localeCompare(b));

712 if (searchingOptions) {

713 similar = similar.map((candidate) => `--${candidate}`);

714 }

715 if (similar.length > 1) {

716 return `

717(Did you mean one of ${similar.join(", ")}?)`;

718 }

719 if (similar.length === 1) {

720 return `

721(Did you mean ${similar[0]}?)`;

722 }

723 return "";

724 }

725 exports.suggestSimilar = suggestSimilar;

726});

727

728// ../../node_modules/commander/lib/command.js

729var require_command = __commonJS(function(exports) {

730 var EventEmitter = __require("node:events").EventEmitter;

731 var childProcess = __require("node:child_process");

732 var path = __require("node:path");

High

Child Process

Package source references child process execution.

dist/packager-tool-m056vsmy.jsView on unpkg · L730

733 var fs = __require("node:fs");

734 var process2 = __require("node:process");

735 var { Argument, humanReadableArgName } = require_argument();

736 var { CommanderError } = require_error();

737 var { Help, stripColor } = require_help();

738 var { Option, DualOptions } = require_option();

739 var { suggestSimilar } = require_suggestSimilar();

740

741 class Command extends EventEmitter {

742 constructor(name) {

743 super();

744 this.commands = [];

745 this.options = [];

746 this.parent = null;

747 this._allowUnknownOption = false;

748 this._allowExcessArguments = false;

749 this.registeredArguments = [];

750 this._args = this.registeredArguments;

Lines 1170-1210javascript

1170 getOptionValueSource(key) {

1171 return this._optionValueSources[key];

1172 }

1173 getOptionValueSourceWithGlobals(key) {

1174 let source;

1175 this._getCommandAndAncestors().forEach((cmd)

Lines 4084-4124javascript

4084 }

4085 getState().commandStart = performance.now();

4086}

4087function recordCommandDuration(durationMs) {

4088 if (!timingsEnabled()) {

4089 return;

dist/index.umd.min-fqefd9kn.jsView file

Lines 1814-1854javascript

1814 constructor(e2) {

1815 var t2;

1816 let n2;

1817 this.refs = {}, this.dynamicAnchors = {}, typeof e2.schema == "object"

dist/node-yz5tz1jx.jsView file

Lines 10-50javascript

10 TargetFramework,

11 TemporaryStorageService,

12 ToolErrorCodes,

13 ToolResult,

14 ZipService,

15 toolsFactoryRepository,

16 translate

17} from "./packager-tool-1znrarvv.js";

18import"./packager-tool-nkrmjr3a.js";

19import

dist/headless-h1myzz32.jsView file

•path = dist/headless-h1myzz32.js kind = oversized_source_file sizeBytes = 9151488 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/headless-h1myzz32.jsView on unpkg

dist/elk.bundled-vpsbxz0p.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/elk.bundled-vpsbxz0p.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/packager-tool-m056vsmy.jsView file

730var EventEmitter = __require("node:events").EventEmitter; L731: var childProcess = __require("node:child_process"); L732: var path = __require("node:path");

High

Child Process

Package source references child process execution.

dist/packager-tool-m056vsmy.jsView on unpkg · L730

1190} L1191: const execArgv = process2.execArgv ?? []; L1192: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/packager-tool-m056vsmy.jsView on unpkg · L1190

4104var telemetryInstanceSlot = singleton("TelemetryService"); L4105: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L4106: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/packager-tool-m056vsmy.jsView on unpkg · L4104

Findings

5 High4 Medium6 Low

HighChild Processdist/packager-tool-m056vsmy.js

HighShelldist/packager-tool-m056vsmy.js

HighCross File Remote Execution Contextdist/node-yz5tz1jx.js

HighBase64 Obscured Urldist/packager-tool-m056vsmy.js

HighSemantic Analysis Limiteddist/elk.bundled-vpsbxz0p.js

MediumNetwork

MediumEnvironment Vars

MediumOversized Source Filedist/headless-h1myzz32.js

MediumStructural Risk Force Deep Review

LowEvaldist/index.umd.min-fqefd9kn.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Low

Affected versions and remediation

This report applies to @uipath/flow-tool@1.202.0.

See all versions of @uipath/flow-tool for other recorded verdicts.

Review the evidence and your use of @uipath/flow-tool@1.202.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:45:20.076Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code