registry / @uipath/integrationservice-tool / 1.196.0

@uipath/integrationservice-tool@1.196.0

Manage Integration Service connectors, connections, and triggers.

AI Security Review

scanned 19d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a UiPath Integration Service CLI that performs user-invoked authenticated API calls and local cache/log writes.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs integrationservice-tool CLI commands.

Impact

Expected CLI management of connectors, connections, triggers, webhooks, and cached metadata.

Mechanism

Authenticated UiPath API client and local CLI cache/log handling

Rationale

Static inspection shows suspicious primitives are bundled dependencies or package-aligned CLI behavior, with no unconsented install/import execution or exfiltration path. The decoded telemetry string is inert in this bundle because local telemetry instantiates LoggerTelemetryProvider rather than a network Application Insights provider.

Evidence

package.jsondist/index.jsdist/tool.jsREADME.md.uipath/.auth.uipath/cache/integrationservice

Network endpoints4

cloud.uipath.comalpha.uipath.comwesteurope-5.in.applicationinsights.azure.com/westeurope.livediagnostics.monitor.azure.com/

@uipath/integrationservice-tool@1.196.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code