registry / @uipath/traces-tool / 1.202.1
@uipath/traces-tool@1.202.1
Query execution traces for UiPath jobs
AI Security Review
scanned 28d ago · by lpm-firewall-aiStatic inspection shows a normal UiPath CLI with no install lifecycle and network calls bound to the user's logged-in base URL. Bundled browser-open helpers and generated SDK defaults do not run on install or send credentials to a hidden recipient.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the traces-tool binary and a traces command.
Impact
No unconsented install, exfiltration, or remote execution behavior was found.
Mechanism
Commands query Orchestrator and LLM observability APIs using the existing login base URL and bearer token.
AI rationale
Static inspection shows a normal UiPath CLI with no install lifecycle and network calls bound to the user's logged-in base URL. Bundled browser-open helpers and generated SDK defaults do not run on install or send credentials to a hidden recipient.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares a CLI with bin traces-tool and main dist/tool.js and has no preinstall, install, or postinstall scripts.
- dist/index.js builds a commander program and parses process.argv only when the user runs the CLI.
- Span retrieval requires an existing logged-in UiPath session and calls that session base URL with its bearer token.
- child_process imports in dist/index-sby22td6.js come from the bundled open and default-browser helpers, not an install hook.
Evidence against
- No eval, dynamic code load, self-dependency, or lifecycle hook appears in package metadata or entrypoints.
- Orchestrator clients set basePath from the authenticated organization and tenant context rather than a hidden recipient.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcedist/tool-2w2shkbx.jsView file
4355var telemetryInstanceSlot = singleton("TelemetryService");
L4356: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L4357: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-2w2shkbx.jsView on unpkg · L435512079if (loginStatus2.loginStatus !== "Logged in" || !loginStatus2.baseUrl) {
throw new Error("Not logged in. Run 'uip login' first.");
}
const tenantName = options.tenant || loginStatus2.tenantN
Low
Ai Review Evidence
Span retrieval requires an existing logged-in UiPath session and calls that session base URL with its bearer token.
dist/tool-2w2shkbx.jsView on unpkg · L12079dist/index-sby22td6.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
High
Findings
2 High2 Medium8 Low
HighBase64 Obscured Urldist/tool-2w2shkbx.js
HighSemantic Analysis Limiteddist/index-sby22td6.js
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/tool-2w2shkbx.js
LowSuspicious Lifecycle Evidencedist/index-sby22td6.js
Affected versions and remediation
This report applies to @uipath/traces-tool@1.202.1.
See all versions of @uipath/traces-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/traces-tool@1.202.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.