registry / @uipath/platform-tool / 1.200.0
@uipath/platform-tool@1.200.0
Manage UiPath platform-level resources such as tenant licensing.
AI Security Review
scanned 28d ago · by lpm-firewall-aiStatic inspection found no install-time execution, payload loading, covert exfiltration, persistence, or destructive behavior. Network and token handling are consistent with the package's authenticated platform-management function.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the platform-tool CLI or imports its library entrypoint.
Impact
No malicious impact was identified; expected behavior is authenticated platform resource management.
Mechanism
It registers platform resource commands and makes authenticated requests to the configured UiPath authority.
AI rationale
Static inspection found no install-time execution, payload loading, covert exfiltration, persistence, or destructive behavior. Network and token handling are consistent with the package's authenticated platform-management function.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a library and a platform-tool CLI entry, with no lifecycle hook declared.
- The CLI registers commands for tenants, users, groups, licenses, and consumables.
- The filesystem helper is a standard Node implementation using path and environment utilities.
- Authenticated requests are used for UiPath tenant operations, and refreshed tokens are checked against the expected authority.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
6 flagged · loading sourcedist/tool-59snk59a.jsView file
737var EventEmitter = __require("node:events").EventEmitter;
L738: var childProcess = __require("node:child_process");
L739: var path = __require("node:path");
High
Child Process
Package source references child process execution.
dist/tool-59snk59a.jsView on unpkg · L73719Cross-file remote execution chain: dist/tool-59snk59a.js spawns dist/tool-c8834439.js; helper contains network access plus dynamic code execution.
L19: class CommanderError extends Error {
L20: constructor(exitCode, code, message) {
L21: super(message);
...
L737: var EventEmitter = __require("node:events").EventEmitter;
L738: var childProcess = __require("node:child_process");
L739: var path = __require("node:path");
...
L783: this._outputConfiguration = {
L784: writeOut: (str) => process2.stdout.write(str),
L785: writeErr: (str) => process2.stderr.write(str),
...
L2140: exports.TextApiResponse = exports.BlobApiResponse = exports.VoidApiResponse = exports.JSONApiResponse = exports.canConsumeForm = exports.mapValues = exports.querystring = exports.e...
L2141: exports.BASE_PATH = "http://loc
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/tool-59snk59a.jsView on unpkg · L1934984
Findings
4 High2 Medium6 Low
HighChild Processdist/tool-59snk59a.js
HighCross File Remote Execution Contextdist/tool-59snk59a.js
HighBase64 Obscured Urldist/tool-59snk59a.js
HighSemantic Analysis Limiteddist/tool-c8834439.js
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/tool-59snk59a.js
Affected versions and remediation
This report applies to @uipath/platform-tool@1.200.0.
See all versions of @uipath/platform-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/platform-tool@1.200.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.