registry / @uipath/maestro-tool / 1.201.0

@uipath/maestro-tool@1.201.0

Create, debug, and run Maestro projects and jobs.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Static inspection found a normal CLI manifest with no install hook and no self-dependency. The flagged primitives are contained in explicit packaging, publishing, telemetry logging, and bundled dependency code rather than an automatic or covert attack chain.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs a Maestro CLI command such as a package publish operation.

Impact

The requested package artifact can be uploaded to the destination configured by the user.

Mechanism

User-directed package publishing and local CLI helper execution.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes library and CLI entry points and contains no lifecycle scripts.
The node helper uploads package files only in its explicit publish flow to a caller-supplied destination.
The telemetry provider records events through local debug logging.
The large case-schema bundle uses localhost values in its CLI configuration shim.
The ELK artifact identifies itself as a bundled third-party layout dependency.

Evidence against

The package includes command execution and network-capable publishing helpers.
Bundled dependencies contain generic telemetry and fetch code, increasing static-analysis noise.
No install-time execution, secret harvesting, covert exfiltration, persistence, or self-dependency was found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStrings

Source & flagged code

7 flagged

dist/packager-tool-gh6pjm6h.jsView file

Lines 710-750javascript

710 });

711 similar.sort((a, b) => a.localeCompare(b));

712 if (searchingOptions) {

713 similar = similar.map((candidate) => `--${candidate}`);

714 }

715 if (similar.length > 1) {

716 return `

717(Did you mean one of ${similar.join(", ")}?)`;

718 }

719 if (similar.length === 1) {

720 return `

721(Did you mean ${similar[0]}?)`;

722 }

723 return "";

724 }

725 exports.suggestSimilar = suggestSimilar;

726});

727

728// ../../node_modules/commander/lib/command.js

729var require_command = __commonJS((exports) => {

730 var EventEmitter = __require("node:events").EventEmitter;

731 var childProcess = __require("node:child_process");

732 var path = __require("node:path");

High

Child Process

Package source references child process execution.

dist/packager-tool-gh6pjm6h.jsView on unpkg · L730

733 var fs = __require("node:fs");

734 var process2 = __require("node:process");

735 var { Argument, humanReadableArgName } = require_argument();

736 var { CommanderError } = require_error();

737 var { Help, stripColor } = require_help();

738 var { Option, DualOptions } = require_option();

739 var { suggestSimilar } = require_suggestSimilar();

740

741 class Command extends EventEmitter {

742 constructor(name) {

743 super();

744 this.commands = [];

745 this.options = [];

746 this.parent = null;

747 this._allowUnknownOption = false;

748 this._allowExcessArguments = false;

749 this.registeredArguments = [];

750 this._args = this.registeredArguments;

Lines 1170-1210javascript

1170 getOptionValueSource(key) {

1171 return this._optionValueSources[key];

1172 }

1173 getOptionValueSourceWithGlobals(key) {

1174 let source;

1175 this._getCommandAndAncestors().forEach((cmd)

Lines 3726-3766javascript

3726 crypto.getRandomValues(bytes);

3727 hex = "";

3728 for (const byte of bytes) {

3729 hex += byte.toString(16).padStart(2,

dist/index.umd.min-drpc57vn.jsView file

Lines 1814-1854javascript

1814 constructor(e2) {

1815 var t2;

1816 let n2;

1817 this.refs = {}, this.dynamicAnchors = {}, typeof e2.schema == "object"

dist/node-y9tkcj1s.jsView file

Lines 10-50javascript

10 TargetFramework,

11 TemporaryStorageService,

12 ToolErrorCodes,

13 ToolResult,

14 ZipService,

15 toolsFactoryRepository,

16 translate

17} from "./packager-tool-wdykzfrx.js";

18import"./packager-tool-nkrmjr3a.js";

19import

dist/index-8bsngk9y.jsView file

•path = dist/index-8bsngk9y.js kind = oversized_source_file sizeBytes = 12091717 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/index-8bsngk9y.jsView on unpkg

dist/elk.bundled-pydbzeez.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/elk.bundled-pydbzeez.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/packager-tool-gh6pjm6h.jsView file

730var EventEmitter = __require("node:events").EventEmitter; L731: var childProcess = __require("node:child_process"); L732: var path = __require("node:path");

High

Child Process

Package source references child process execution.

dist/packager-tool-gh6pjm6h.jsView on unpkg · L730

1190} L1191: const execArgv = process2.execArgv ?? []; L1192: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/packager-tool-gh6pjm6h.jsView on unpkg · L1190

3746var telemetryInstanceSlot = singleton("TelemetryService"); L3747: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L3748: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/packager-tool-gh6pjm6h.jsView on unpkg · L3746

Findings

5 High4 Medium5 Low

HighChild Processdist/packager-tool-gh6pjm6h.js

HighShelldist/packager-tool-gh6pjm6h.js

HighCross File Remote Execution Contextdist/node-y9tkcj1s.js

HighBase64 Obscured Urldist/packager-tool-gh6pjm6h.js

HighSemantic Analysis Limiteddist/elk.bundled-pydbzeez.js

MediumNetwork

MediumEnvironment Vars

MediumOversized Source Filedist/index-8bsngk9y.js

MediumStructural Risk Force Deep Review

LowEvaldist/index.umd.min-drpc57vn.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Affected versions and remediation

This report applies to @uipath/maestro-tool@1.201.0.

See all versions of @uipath/maestro-tool for other recorded verdicts.

Review the evidence and your use of @uipath/maestro-tool@1.201.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-07 13:45:42.902Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code