registry / @uipath/traces-tool / 1.202.0
@uipath/traces-tool@1.202.0
Query execution traces for UiPath jobs
AI Security Review
scanned 28d ago · by lpm-firewall-aiInspection of package.json and the CLI bundles shows a user-invoked UiPath traces client with no lifecycle scripts or hidden exfiltration. Tokens stay on the logged-in UiPath host, which matches the package purpose.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the traces-tool binary or imports registerCommands and then invokes a spans or feedback command.
Impact
No unconsented install mutation, credential theft, or remote payload execution was found.
Mechanism
Commands authenticate with the saved UiPath login and request traces or feedback on that same HTTPS base URL. Bundled child-process use is for local registry lookup and opening a browser.
AI rationale
Inspection of package.json and the CLI bundles shows a user-invoked UiPath traces client with no lifecycle scripts or hidden exfiltration. Tokens stay on the logged-in UiPath host, which matches the package purpose.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json names a published CLI for querying UiPath job traces, exposes only dist entry points, and declares no install lifecycle scripts.
- Runtime registration only adds user-invoked traces spans and feedback commands.
- A bearer token from the existing UiPath login is sent only to that login host's llmopstenant traces API after an explicit traces command.
- dist/index-sby22td6.js is the bundled open helper that launches a local browser; it is not an install-time payload.
Evidence against
- Windows registry reads are limited to a local UiPath analytics id and return empty off Windows.
- The generated orchestrator client default host is overridden by the logged-in organization base path before API calls.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcedist/tool-1yb9q2c5.jsView file
4355var telemetryInstanceSlot = singleton("TelemetryService");
L4356: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L4357: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-1yb9q2c5.jsView on unpkg · L435512176var metadata = {
name: "traces-tool",
version: package_default.version,
description: "Fetch LLM Observability traces for UiPath jobs",
commandPrefix: "t
Low
Ai Review Evidence
Runtime registration only adds user-invoked traces spans and feedback commands.
dist/tool-1yb9q2c5.jsView on unpkg · L1217612094Authorization: `Bearer ${loginStatus2.accessToken ?? ""}`,
"Content-Type": "application/json",
Accept: "application/json"
}
Low
Ai Review Evidence
A bearer token from the existing UiPath login is sent only to that login host's llmopstenant traces API after an explicit traces command.
dist/tool-1yb9q2c5.jsView on unpkg · L12094Findings
2 High2 Medium8 Low
HighBase64 Obscured Urldist/tool-1yb9q2c5.js
HighSemantic Analysis Limiteddist/index-sby22td6.js
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/tool-1yb9q2c5.js
LowAi Review Evidencedist/tool-1yb9q2c5.js
LowAi Review Evidencedist/index-sby22td6.js
Affected versions and remediation
This report applies to @uipath/traces-tool@1.202.0.
See all versions of @uipath/traces-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/traces-tool@1.202.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.