registry / @uipath/context-grounding-tool / 1.200.0
@uipath/context-grounding-tool@1.200.0
Tool for context grounding operations via the UiPath Python SDK
AI Security Review
scanned 28d ago · by lpm-firewall-aiInspection shows a UiPath context-grounding CLI with no lifecycle scripts, no remote payload, and authentication limited to an HTTPS UiPath identity endpoint chosen by flag, environment, or config. Local process execution targets the installed uipath tool or fixed OS browser helpers after the user starts the command.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the context-grounding-tool bin or imports registerCommands. There is no install-time hook.
Impact
Effects stay within the invoked UiPath CLI session. No unsolicited credential export, persistence, or foreign agent-config write was found.
Mechanism
Command parsing forwards arguments to a local uipath process and, during login refresh, posts OAuth tokens only to the HTTPS identity token path on the configured UiPath base URL.
AI rationale
Inspection shows a UiPath context-grounding CLI with no lifecycle scripts, no remote payload, and authentication limited to an HTTPS UiPath identity endpoint chosen by flag, environment, or config. Local process execution targets the installed uipath tool or fixed OS browser helpers after the user starts the command.
Network endpoints1
cloud.uipath.com
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Published package.json exposes a CLI bin and module entry and has no install lifecycle scripts.
- The bin registers commands and parses process.argv only when the user runs the command.
- OAuth authorize and token URLs are built from an HTTPS-validated base URL that defaults to cloud.uipath.com.
- User commands spawn a locally discovered uipath executable and pass the caller environment plus auth env.
- child_process usage in the companion bundle is a default-browser helper that runs fixed OS utilities.
Evidence against
- Token refresh posts the refresh token to the configured UiPath identity token endpoint when the user authenticates.
- If the local uipath executable is missing, setup text tells the user to install the Python package and does not install it itself.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flagged · loading sourcedist/tool-nvhfxv67.jsView file
17import { fileURLToPath } from "node:url";
L18: import childProcess3 from "node:child_process";
L19: import fs5, { constants as fsConstants2 } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/tool-nvhfxv67.jsView on unpkg · L17•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/tool-nvhfxv67.jsView on unpkgdist/tool-tckprqf1.jsView file
19Cross-file remote execution chain: dist/tool-tckprqf1.js spawns dist/tool-nvhfxv67.js; helper contains network access plus dynamic code execution.
L19: class CommanderError extends Error {
L20: constructor(exitCode, code, message) {
L21: super(message);
...
L737: var EventEmitter = __require("node:events").EventEmitter;
L738: var childProcess = __require("node:child_process");
L739: var path = __require("node:path");
...
L783: this._outputConfiguration = {
L784: writeOut: (str) => process2.stdout.write(str),
L785: writeErr: (str) => process2.stderr.write(str),
...
L2732: try {
L2733: const json = JSON.parse(text);
L2734: return [json, true];
Findings
4 High3 Medium5 Low
HighChild Processdist/tool-nvhfxv67.js
HighCross File Remote Execution Contextdist/tool-tckprqf1.js
HighBase64 Obscured Urldist/tool-tckprqf1.js
HighSemantic Analysis Limiteddist/tool-nvhfxv67.js
MediumNetwork
MediumEnvironment Vars
MediumStripped Provenance Metadatadist/tool-tckprqf1.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.js
Affected versions and remediation
This report applies to @uipath/context-grounding-tool@1.200.0.
See all versions of @uipath/context-grounding-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/context-grounding-tool@1.200.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.