registry / @uipath/traces-tool / 1.196.0

@uipath/traces-tool@1.196.0

Query execution traces for UiPath jobs

AI Security Review

scanned 19d ago · by lpm-firewall-ai

No confirmed malicious attack surface was found. Runtime behavior is a UiPath CLI tool for trace/span and feedback APIs with auth/token refresh support.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the traces-tool CLI or imports dist/tool.js and invokes registered commands.

Impact

Queries UiPath trace data and manages feedback for an authenticated UiPath tenant.

Mechanism

UiPath API client with auth file/env handling and optional telemetry/logging

Rationale

Static source inspection shows a package-aligned UiPath traces/feedback CLI; suspicious primitives are bundled dependencies, auth/token refresh, browser/robot helpers, and telemetry. No install-time execution, obfuscated payload execution, credential exfiltration to non-UiPath endpoints, persistence, destructive behavior, or AI-agent control-surface mutation was found.

Evidence

package.jsondist/index.jsdist/tool.js~/.uipath/.authconfigured log file path

Network endpoints4

cloud.uipath.comalpha.uipath.com/uipattycyrhx/abizon_1/orchestrator_westeurope-5.in.applicationinsights.azure.com/westeurope.livediagnostics.monitor.azure.com/

@uipath/traces-tool@1.196.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code