registry / @uipath/tasks-tool / 1.201.0
@uipath/tasks-tool@1.201.0
Manage Action Center tasks.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe inspected code is broadly consistent with a UiPath command-line client, but opaque telemetry configuration and incomplete analysis of the large bundle prevent a clean verdict. No concrete malicious behavior was found.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the tasks-tool command.
Impact
The opaque telemetry configuration and large bundled runtime leave a limited unresolved review risk, but no concrete malicious action was established.
Mechanism
Bundled telemetry, OAuth authentication, and URL-opening support.
AI rationale
The inspected code is broadly consistent with a UiPath command-line client, but opaque telemetry configuration and incomplete analysis of the large bundle prevent a clean verdict. No concrete malicious behavior was found.
Evidence
dist/tool-rsk1xt86.jsdist/index-w03qc9m8.jsdist/index.js
Network endpoints2
westeurope-5.in.applicationinsights.azure.comwesteurope.livediagnostics.monitor.azure.com
Decision evidence
public snapshotAI called this Suspicious at 72.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The manifest exposes a CLI that runs bundled code.
- The shared bundle hides its telemetry connection string behind Base64 decoding.
- A bundled OS-opening helper imports child-process and spawns a command.
Evidence against
- package.json defines no install, preinstall, or postinstall lifecycle script.
- The CLI entrypoint only registers commands and parses user-supplied arguments.
- The authentication code derives its token endpoint from an HTTPS UiPath authority and performs an OAuth refresh request.
- No source evidence shows secret harvesting, destructive actions, persistence, or self-dependency.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcedist/tool-rsk1xt86.jsView file
3660var telemetryInstanceSlot = singleton("TelemetryService");
L3661: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L3662: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-rsk1xt86.jsView on unpkg · L36603659// ../common/src/telemetry/telemetry-init.ts
var telemetryInstanceSlot = singleton("TelemetryService");
var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]");
function getGlobalTelemetryInstance() {
Medium
Ai Review Evidence
The shared bundle hides its telemetry connection string behind Base64 decoding.
dist/tool-rsk1xt86.jsView on unpkg · L3659dist/index-w03qc9m8.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
Findings
2 High5 Medium3 Low
HighBase64 Obscured Urldist/tool-rsk1xt86.js
HighSemantic Analysis Limiteddist/index-w03qc9m8.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencepackage.json
MediumAi Review Evidencedist/tool-rsk1xt86.js
MediumAi Review Evidencedist/index-w03qc9m8.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @uipath/tasks-tool@1.201.0.
See all versions of @uipath/tasks-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/tasks-tool@1.201.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.