registry / @elyracode/web-ui / 0.9.17

@elyracode/web-ui@0.9.17

Reusable web UI components for AI chat interfaces powered by @elyra/ai

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

A host application registers the REPL/tool factory and an agent or caller invokes it with code.

Impact

An untrusted agent instruction or prompt-influenced tool call could read injected attachments and send their contents to an attacker-selected endpoint.

Mechanism

Sandboxed browser code execution with injected attachment data and arbitrary network-capable JavaScript.

Rationale

This is not concrete package malware: it has no lifecycle hook or automatic hostile behavior. It is a meaningful dual-use AI capability that combines attachment access with arbitrary browser-code/network execution, so it warrants a warning rather than a block.

Evidence

package.jsonsrc/tools/javascript-repl.tssrc/ChatPanel.tssrc/components/SandboxedIframe.tssrc/components/sandbox/AttachmentsRuntimeProvider.tssrc/prompts/prompts.tssrc/tools/extract-document.ts

Decision evidence

public snapshot

AI called this at 88.0% confidence with false-positive risk.

@elyracode/web-ui@0.9.17

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code