registry / @uipath/context-grounding-tool / 1.201.0

@uipath/context-grounding-tool@1.201.0

Tool for context grounding operations via the UiPath Python SDK

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package has no install lifecycle hook and its visible behavior is consistent with a user-invoked UiPath CLI wrapper. However, the obscured telemetry endpoint and incomplete static coverage around bundled command-launching code leave a bounded unresolved risk, so a warning is warranted rather than a clean verdict.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs the context-grounding-tool command.

Impact

A configured UiPath authentication flow may contact its configured identity endpoint; no unconsented exfiltration or destructive behavior was confirmed.

Mechanism

User-invoked Python CLI delegation with telemetry.

AI rationale

Network endpoints2

westeurope-5.in.applicationinsights.azure.comwesteurope.livediagnostics.monitor.azure.com

Decision evidence

public snapshot

AI called this Suspicious at 76.0% confidence as Unknown with high false-positive risk.

Evidence for warning

The manifest exposes a command-line entrypoint, so package code runs when the user invokes the tool.
The runtime decodes a Base64 telemetry connection string, obscuring its telemetry destination from ordinary source review.
A bundled helper can spawn a command with caller-supplied arguments; the surrounding bundle is too large for complete static alias coverage.

Evidence against

package.json declares no preinstall, install, postinstall, or other lifecycle hook.
The visible CLI is a wrapper for a locally configured UiPath Python executable and runs only after a user command.
The telemetry code includes redaction for token, secret, password, credential, JWT, URL, and home-directory values.
No source evidence shows secret harvesting, destructive actions, persistence, self-dependency, or agent-control configuration writes.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

Source & flagged code

5 flagged

dist/tool-92f343nz.jsView file

Lines 3293-3334javascript

3293 crypto.getRandomValues(bytes);

3294 hex = "";

3295 for (const byte of bytes) {

3296 hex += byte.toString(16).padStart(2, "0");

3297 }

3298 } while (/^0+$/.test(hex));

3299 return hex;

3300 }

3301}

3302// ../common/src/telemetry/proxy-http-agent.ts

3303var slot = singleton("ProxyAuthHttpsAgent");

3304

3305// ../common/src/telemetry/node-appinsights-telemetry-provider.ts

3306var providerSlot = singleton("TelemetryProvider");

3307

3308// ../common/src/telemetry/telemetry-spool.ts

3309var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

3310var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

3311

3312// ../common/src/telemetry/telemetry-init.ts

3313var telemetryInstanceSlot = singleton("TelemetryService");

3314var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

Medium

Ai Review Evidence

The runtime decodes a Base64 telemetry connection string, obscuring its telemetry destination from ordinary source review.

dist/tool-92f343nz.jsView on unpkg · L3314

3315function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-92f343nz.jsView on unpkg · L3313

3316 const existing = telemetryInstanceSlot.get();

3317 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

3318 return existing;

3319 }

3320 return;

3321}

3322var _localTelemetryInstance;

3323function getTelemetryInstance() {

3324 const global = getGlobalTelemetryInstance();

3325 if (global)

3326 return global;

3327 if (!_localTelemetryInstance) {

3328 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

3329 }

3330 return _localTelemetryInstance;

3331}

3332var telemetry = new Proxy({}, {

3333 get(_, prop) {

3334 const instance = getTelemetryInstance();

dist/index-w03qc9m8.jsView file

Lines 481-521javascript

481 const isBundled = !__dirname2 || __dirname2 === "/";

482 let exeLocalXdgOpen = false;

483 try {

package.jsonView file

Lines 1-31json

2 "name": "@uipath/context-grounding-tool",

3 "license": "MIT",

4 "version": "1.201.0",

5 "description": "Tool for context grounding operations via the UiPath Python SDK",

Source & flagged code

5 flagged · loading source

dist/tool-92f343nz.jsView file

3313var telemetryInstanceSlot = singleton("TelemetryService"); L3314: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L3315: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-92f343nz.jsView on unpkg · L3313

3314var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]");

Medium

Ai Review Evidence

The runtime decodes a Base64 telemetry connection string, obscuring its telemetry destination from ordinary source review.

dist/tool-92f343nz.jsView on unpkg · L3314

dist/index-w03qc9m8.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

Findings

2 High5 Medium3 Low

HighBase64 Obscured Urldist/tool-92f343nz.js

HighSemantic Analysis Limiteddist/index-w03qc9m8.js

MediumNetwork

MediumEnvironment Vars

MediumAi Review Evidencepackage.json

MediumAi Review Evidencedist/tool-92f343nz.js

MediumAi Review Evidencedist/index-w03qc9m8.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @uipath/context-grounding-tool@1.201.0.

See all versions of @uipath/context-grounding-tool for other recorded verdicts.

Review the evidence and your use of @uipath/context-grounding-tool@1.201.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-07 13:52:54.386Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code