registry / @uipath/integrationservice-tool / 1.203.0
@uipath/integrationservice-tool@1.203.0
Manage Integration Service connectors, connections, and triggers.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe required source paths show ordinary CLI and connector behavior: environment authentication is gated and requests use a validated service context. Static hints about a hidden gateway and persistence were not established by the inspected source, so the package is clean.
Static reason
One or more suspicious static signals were detected.
Trigger
Normal CLI use or library calls that perform connector operations.
Impact
The inspected source does not establish credential redirection or persistence.
Mechanism
Authentication resolves a service context and connector requests use its base URL; the inspected Base64 code parses pagination tokens.
AI rationale
The required source paths show ordinary CLI and connector behavior: environment authentication is gated and requests use a validated service context. Static hints about a hidden gateway and persistence were not established by the inspected source, so the package is clean.
Decision evidence
public snapshotAI called this Clean at 82.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a library and CLI entrypoint and declares no lifecycle scripts.
- Environment authentication is explicitly gated, and connector requests use the validated authentication context.
- The flagged Base64 logic decodes pagination tokens; the CLI bundle uses child_process for a PowerShell helper.
Evidence against
- The inspected request path builds its endpoint from the authenticated service base URL and sends the bearer token there.
- No fixed unofficial gateway or credential redirection was established in the inspected source.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flagged · loading sourcedist/tool-0k9cgcxa.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/tool-0k9cgcxa.js:
async writeFile(filePath, data) {
await fs.writeFile(filePath, data);
await fs.writeFile(lockFile, ownerId, { flag: "wx" });
await this.writeFile(destEntry, content);
"authorization",
await fs2.writeFile(path2, "");
headerParameters["Authorization"] = `Bearer ${tokenString}`;
headerParameters["Authorization"] = `Bearer ${tokenString}`;
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/tool-0k9cgcxa.jsView on unpkg4383var telemetryInstanceSlot = singleton("TelemetryService");
L4384: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L4385: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-0k9cgcxa.jsView on unpkg · L438313336var isEnvAuthEnabled = () => process.env[ENV_AUTH_ENABLE_VAR] === "true";
var isRobotAuthEnforced = () => process.env[ENFORCE_ROBOT_AUTH_VAR] === "true";
var requireEnv = (name) => {
const
Findings
3 High2 Medium7 Low
HighCredential Redirect Persistencedist/tool-0k9cgcxa.js
HighBase64 Obscured Urldist/tool-0k9cgcxa.js
HighSemantic Analysis Limiteddist/index-sby22td6.js
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/tool-0k9cgcxa.js
LowAi Review Evidencedist/tool-0k9cgcxa.js
Affected versions and remediation
This report applies to @uipath/integrationservice-tool@1.203.0.
See all versions of @uipath/integrationservice-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/integrationservice-tool@1.203.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.