registry / @uipath/maestro-tool / 1.202.0
@uipath/maestro-tool@1.202.0
Create, debug, and run Maestro projects and jobs.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThis is a user-run UiPath Maestro CLI with no npm lifecycle hooks and no self-install chain. Process spawning and network publish calls are package-aligned and use caller-provided destinations and credentials.
Static reason
One or more suspicious static signals were detected.
Trigger
A user explicitly invokes the maestro-tool CLI.
Impact
No unsolicited credential theft, remote payload, persistence, or agent-control mutation was established.
Mechanism
The CLI registers commands and, for publish or signing, uses the destination and credentials the caller supplies, or spawns a local browser or dotnet process.
AI rationale
This is a user-run UiPath Maestro CLI with no npm lifecycle hooks and no self-install chain. Process spawning and network publish calls are package-aligned and use caller-provided destinations and credentials.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares the UiPath Maestro CLI with main and bin entrypoints and no install lifecycle scripts.
- dist/index.js only builds a command program and parses process.argv when the user runs the binary.
- dist/index-h8cph72k.js is the vendored open helper and spawns a local browser command with an argument array.
- dist/node-39h6t9g1.js reads a local UiPath registry analytics id and publishes only to a caller-supplied NuGet or Orchestrator URL using a caller-supplied key.
- dist/elk.bundled-vpsbxz0p.js is the vendored elkjs layout bundle.
Evidence against
- Publish and signing code can send packages and caller-supplied keys to an operator-chosen feed and can spawn dotnet nuget sign, which is expected CLI behavior rather than an install-time attack.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcedist/index-h8cph72k.jsView file
6import { fileURLToPath } from "node:url";
L7: import childProcess3 from "node:child_process";
L8: import fs5, { constants as fsConstants2 } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/index-h8cph72k.jsView on unpkg · L687L88: // ../../node_modules/powershell-utils/index.js
L89: import process2 from "node:process";
High
dist/index.umd.min-fqefd9kn.jsView file
1834u2 = `${a2.scopeRefs(Je.default.scope)}return ${t3}`, this.opts.code.process && (u2 = this.opts.code.process(u2, e2));
L1835: const n3 = new Function(`${Je.default.self}`, `${Je.default.scope}`, u2)(this, this.scope.get());
L1836: if (this.scope.value(l2, { ref: n3 }), n3.errors = null, n3.schema = e2.schema, n3.schemaEnv = e2, e2.$async && (n3.$async = true), this.opts.code.source === true && (n3.source = {...
Findings
5 High4 Medium6 Low
HighChild Processdist/index-h8cph72k.js
HighShelldist/index-h8cph72k.js
HighCross File Remote Execution Contextdist/node-39h6t9g1.js
HighBase64 Obscured Urldist/node-39h6t9g1.js
HighSemantic Analysis Limiteddist/elk.bundled-vpsbxz0p.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/headless-h1h3kfw1.js
MediumStructural Risk Force Deep Review
LowEvaldist/index.umd.min-fqefd9kn.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @uipath/maestro-tool@1.202.0.
See all versions of @uipath/maestro-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/maestro-tool@1.202.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.