@uipath/solution-tool@1.200.0
Create, pack, publish, and deploy UiPath Automation Solutions.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe explicit init command creates AI-agent configuration files, which is a guarded agent capability requiring a warning under policy. The inspected package entrypoints show no npm lifecycle hook or concrete malicious execution chain.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the solution-tool init command.
Impact
This changes agent guidance for that newly created project; it does not run during npm installation.
Mechanism
The command loads a packaged template and writes AGENTS.md and CLAUDE.md beneath the new solution directory.
AI rationale
The explicit init command creates AI-agent configuration files, which is a guarded agent capability requiring a warning under policy. The inspected package entrypoints show no npm lifecycle hook or concrete malicious execution chain.
Evidence
AGENTS.mdCLAUDE.md
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package exposes a command-line tool and has no lifecycle hook in its manifest.
- The explicit init command creates briefing files for AI coding agents inside the newly created solution directory.
- The initializer writes the briefing only when its caller supplies briefing content, rather than at package installation.
- Authentication refresh is an OAuth token exchange with an expected authority check.
- A download helper can forward a bearer token to its supplied download URL, but no active attack trigger was identified.
- The bundled process launch is a normal argument-based spawn call.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
8 flagged · loading sourcedist/packager-tool-y4wacqkp.jsView file
739var EventEmitter = __require("node:events").EventEmitter;
L740: var childProcess = __require("node:child_process");
L741: var path = __require("node:path");
High
Child Process
Package source references child process execution.
dist/packager-tool-y4wacqkp.jsView on unpkg · L7398668var telemetryInstanceSlot = singleton("TelemetryService");
L8669: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L8670: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/packager-tool-y4wacqkp.jsView on unpkg · L8668738var require_command = __commonJS((exports) => {
L739: var EventEmitter = __require("node:events").EventEmitter;
L740: var childProcess = __require("node:child_process");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/packager-tool-y4wacqkp.jsView on unpkg · L738Findings
1 Critical6 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/packager-tool-t6cck14z.js
HighChild Processdist/packager-tool-y4wacqkp.js
HighShelldist/packager-tool-t6cck14z.js
HighCredential Redirect Persistencedist/packager-tool-nek785e1.js
HighCross File Remote Execution Contextdist/packager-tool-t6cck14z.js
HighBase64 Obscured Urldist/packager-tool-y4wacqkp.js
HighSemantic Analysis Limiteddist/packager-tool-q90kqh83.js
MediumDynamic Requiredist/packager-tool-y4wacqkp.js
MediumNetwork
MediumEnvironment Vars
LowEval
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @uipath/solution-tool@1.200.0.
See all versions of @uipath/solution-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/solution-tool@1.200.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.