registry / @uipath/identity-tool / 1.200.0
@uipath/identity-tool@1.200.0
Manage Identity Server users, groups, robot accounts, and external apps.
AI Security Review
scanned 28d ago · by lpm-firewall-aiStatic inspection shows a published CLI with bin and main entrypoints and no lifecycle scripts. Process, file, and network use is consistent with authenticating to a UiPath Identity Server the operator configures.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the identity-tool bin or imports registerCommands.
Impact
No unconsented install mutation, credential theft, or remote payload execution was found.
Mechanism
Commander registers identity-management commands that talk to a caller-supplied UiPath host and use local files only for CLI state.
AI rationale
Static inspection shows a published CLI with bin and main entrypoints and no lifecycle scripts. Process, file, and network use is consistent with authenticating to a UiPath Identity Server the operator configures.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a module CLI bin identity-tool and has no install lifecycle scripts or dependencies.
- Bundled dist code registers an admin command set for Identity Server users, groups, robot accounts, and OAuth scopes.
- Local filesystem and environment helpers, including browser open, are ordinary CLI utilities invoked from the command entrypoint.
Evidence against
- No preinstall, install, or postinstall hook, no self-dependency, and no eval or dynamic code loading.
- Network hosts are UiPath identity and CLI repository endpoints, plus an example callback, not a hidden exfiltration sink.
- child_process usage is limited to platform helpers such as registry lookup and opening a URL.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flagged · loading sourcedist/tool-9ydf3fx4.jsView file
737var EventEmitter = __require("node:events").EventEmitter;
L738: var childProcess = __require("node:child_process");
L739: var path = __require("node:path");
High
Child Process
Package source references child process execution.
dist/tool-9ydf3fx4.jsView on unpkg · L73719Cross-file remote execution chain: dist/tool-9ydf3fx4.js spawns dist/tool-z1g01crb.js; helper contains network access plus dynamic code execution.
L19: class CommanderError extends Error {
L20: constructor(exitCode, code, message) {
L21: super(message);
...
L737: var EventEmitter = __require("node:events").EventEmitter;
L738: var childProcess = __require("node:child_process");
L739: var path = __require("node:path");
...
L783: this._outputConfiguration = {
L784: writeOut: (str) => process2.stdout.write(str),
L785: writeErr: (str) => process2.stderr.write(str),
...
L2108: });
L2109: // package.json
L2110: var package_default = {
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/tool-9ydf3fx4.jsView on unpkg · L198690var telemetryInstanceSlot = singleton("TelemetryService");
L8691: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L8692: function getGlobalTelemetryInstance() {
Findings
4 High2 Medium6 Low
HighChild Processdist/tool-9ydf3fx4.js
HighCross File Remote Execution Contextdist/tool-9ydf3fx4.js
HighBase64 Obscured Urldist/tool-9ydf3fx4.js
HighSemantic Analysis Limiteddist/tool-z1g01crb.js
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/tool-9ydf3fx4.js
LowAi Review Evidencedist/tool-9ydf3fx4.js
Affected versions and remediation
This report applies to @uipath/identity-tool@1.200.0.
See all versions of @uipath/identity-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/identity-tool@1.200.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.