@robylon/web-react-sdk
React SDK for Robylon AI Chatbot
This report shows the evidence for @robylon/web-react-sdk@2.0.1. 0 of 2 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 11h ago · by lpm-firewall-aiThe SDK automatically captures browser errors and unhandled rejections and sends messages, stacks, and context to its own API. Because this runtime collection is not disclosed in the reviewed material and can include application details, classify it as suspicious telemetry rather than malicious exfiltration.
Decision evidence
public snapshot- The SDK registers global browser error and unhandled-rejection handlers and passes error details to its tracker.
- The tracker posts JSON logs to the configured Robylon API endpoint.
- The logs include error messages, stacks, and context such as filenames or rejection reasons.
- The destination is the SDK’s own Robylon API, consistent with its stated chatbot purpose.
- The reviewed code sends error diagnostics; it does not show collection of credentials or unrelated local files.
Source & flagged code
5 flaggedSource sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/cjs/index.jsView on unpkgThe SDK registers global browser error and unhandled-rejection handlers and passes error details to its tracker.
dist/cjs/index.jsView on unpkg · L3Findings
Affected versions and remediation
This report applies to @robylon/web-react-sdk@2.0.1.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @robylon/web-react-sdk@2.0.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.