registry / @uipath/solution-tool / 1.202.0
@uipath/solution-tool@1.202.0
Create, pack, publish, and deploy UiPath Automation Solutions.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThis is the UiPath solution CLI with no npm install hooks. Agent markdown is a user-invoked briefing written only into the solution directory the caller created or extracted, which matches the product and leaves no concrete attack surface.
Static reason
One or more suspicious static signals were detected.
Trigger
No automatic trigger. Briefing files are written only by an explicit CLI solution init or extract.
Impact
No unconsented agent control-surface change, credential export, or remote payload execution was found.
Mechanism
The CLI copies a packaged documentation template to AGENTS.md and CLAUDE.md in the named solution directory and otherwise performs local pack, publish, and deploy work.
AI rationale
This is the UiPath solution CLI with no npm install hooks. Agent markdown is a user-invoked briefing written only into the solution directory the caller created or extracted, which matches the product and leaves no concrete attack surface.
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json identifies @uipath/solution-tool 1.202.0 as a UiPath solution CLI and maps bin solution-tool to dist/index.js, with no preinstall, install, or postinstall scripts.
- solutionInitAsync writes AGENTS.md and CLAUDE.md only when briefingContent is supplied, and only inside the caller-named solution directory; the init command passes the packaged template into that call.
- Extract writes only missing AGENTS.md and CLAUDE.md from the packaged ./templates/AGENTS.md asset into the extracted solution directory.
- child_process imports in dist/index-sby22td6.js belong to the bundled open and WSL helper modules used by the CLI.
- dist/packager-tool-bme8epz8.js is the solution packager implementation loaded by the CLI entry.
Evidence against
- The CLI writes AGENTS.md and CLAUDE.md, which coding agents may read, only after an explicit solution init or extract and only inside that solution directory.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
7 flagged · loading sourcedist/packager-tool-bme8epz8.jsView file
54import { promisify } from "node:util";
L55: import childProcess from "node:child_process";
L56: import { promisify as promisify2 } from "node:util";
High
Child Process
Package source references child process execution.
dist/packager-tool-bme8epz8.jsView on unpkg · L54162var execFile;
L163: var powerShellPath = () => `${process3.env.SYSTEMROOT || process3.env.windir || String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`;
L164: var executePowerShell = async (command, options = {}) => {
High
54Cross-file remote execution chain: dist/packager-tool-bme8epz8.js spawns dist/packager-tool-bt0z25tw.js; helper contains network access plus dynamic code execution.
L54: import { promisify } from "node:util";
L55: import childProcess from "node:child_process";
L56: import { promisify as promisify2 } from "node:util";
...
L186: ];
L187: executePowerShell.encodeCommand = (command) => Buffer2.from(command, "utf16le").toString("base64");
L188: executePowerShell.escapeArgument = (value) => `'${String(value).replaceAll("'", "''")}'`;
...
L225: const command = String.raw`(Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice").ProgId`;
L226: const { stdout } = await executePowerShell(command, { powerShellPath: psPath });
L227: return stdout.tr
Findings
6 High4 Medium4 Low
HighChild Processdist/packager-tool-bme8epz8.js
HighShelldist/packager-tool-bme8epz8.js
HighCredential Redirect Persistencedist/packager-tool-w1dzcj31.js
HighCross File Remote Execution Contextdist/packager-tool-bme8epz8.js
HighBase64 Obscured Urldist/packager-tool-bme8epz8.js
HighSemantic Analysis Limiteddist/index-sby22td6.js
MediumDynamic Requiredist/packager-tool-w1dzcj31.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @uipath/solution-tool@1.202.0.
See all versions of @uipath/solution-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/solution-tool@1.202.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.