registry / @uipath/context-grounding-tool / 1.196.0

@uipath/context-grounding-tool@1.196.0

Tool for context grounding operations via the UiPath Python SDK

AI Security Review

scanned 19d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Suspicious primitives are aligned with a UiPath CLI wrapper that locates Python, forwards user commands, and manages UiPath authentication.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs context-grounding-tool CLI commands such as setup, help, exec, or default action.

Impact

Can read and refresh UiPath credentials for CLI use and run the configured local uipath executable; no evidence of credential exfiltration or install-time execution.

Mechanism

User-invoked CLI wrapper with OAuth refresh and local Python executable spawning

Rationale

Static inspection shows a bundled UiPath context-grounding CLI bridge with user-invoked child_process use, OAuth token refresh, and local cache/auth file handling. The scanner hits are package-aligned and no install-time execution, hidden exfiltration, persistence, destructive behavior, or AI-agent control mutation was found.

Evidence

package.jsondist/index.jsdist/tool.js~/.uipath/.auth~/.uipath/.uipath-python-cache.json.env

Network endpoints3

cloud.uipath.com/identity_/connect/tokenwesteurope-5.in.applicationinsights.azure.com/westeurope.livediagnostics.monitor.azure.com/

@uipath/context-grounding-tool@1.196.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code