registry / @uipath/context-grounding-tool / 1.202.0

@uipath/context-grounding-tool@1.202.0

Tool for context grounding operations via the UiPath Python SDK

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Static inspection found no lifecycle hook or concrete malicious behavior. The observed process and authentication functionality is aligned with an explicit UiPath command wrapper.

Static reason

One or more suspicious static signals were detected.

Trigger

A user invokes the package CLI or its registered command.

Impact

No install-time mutation, covert persistence, or unrelated data export was identified.

Mechanism

The command layer forwards supplied arguments to the local UiPath command tooling.

AI rationale

Static inspection found no lifecycle hook or concrete malicious behavior. The observed process and authentication functionality is aligned with an explicit UiPath command wrapper.

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes a library and CLI entrypoint and contains no lifecycle scripts.
The required bundled helper exports browser-opening utilities only.
The tool registers context-grounding setup and execution commands.
Execution is activated through the user-invoked CLI command path.

Evidence against

The bundle can launch a local UiPath executable and forwards command arguments; this is consistent with its stated CLI-wrapper role.
The bundle contains authentication and network support for UiPath operations, with no inspected evidence of unrelated credential export.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 7 file(s), 420 KB of source, external domains: cloud.uipath.com, github.com, govcloud.uipath.us, npm.pkg.github.com, www.python.org

Source & flagged code

6 flagged

dist/tool-ead665dg.jsView file

Lines 3943-3983javascript

3943 }

3944 getState().commandStart = performance.now();

3945}

3946function recordCommandDuration(durationMs) {

3947 if (!timingsEnabled()) {

3948 return;

3949 }

3950 getState().commandMs = durationMs;

3951}

3952// ../common/src/telemetry/proxy-http-agent.ts

3953var slot = singleton("ProxyAuthHttpsAgent");

3954

3955// ../common/src/telemetry/node-appinsights-telemetry-provider.ts

3956var providerSlot = singleton("TelemetryProvider");

3957

3958// ../common/src/telemetry/telemetry-spool.ts

3959var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

3960var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

3961

3962// ../common/src/telemetry/telemetry-init.ts

3963var telemetryInstanceSlot = singleton("TelemetryService");

3964var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

3965function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-ead665dg.jsView on unpkg · L3963

3966 const existing = telemetryInstanceSlot.get();

3967 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

3968 return existing;

3969 }

3970 return;

3971}

3972function setGlobalTelemetryInstance(instance) {

3973 telemetryInstanceSlot.set(instance);

3974}

3975var _localTelemetryInstance;

3976function getTelemetryInstance() {

3977 const global = getGlobalTelemetryInstance();

3978 if (global)

3979 return global;

3980 if (!_localTelemetryInstance) {

3981 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

3982 setGlobalTelemetryInstance(_localTelemetryInstance);

3983 }

Lines 6901-6941javascript

6901 const result = await runUipathPythonCommand(actualArgs, {

6902 commandPrefix: config.commandPrefix,

6903 commandRules: config.commandRules,

6904 commandPreflight: config.commandPreflight,

6905 requiredEnvironmentVariables: config.requiredEnvironmentVariables,

6906 outputFormatOption: config.outputFormatOption,

6907 outputFormats: config.outputFormats,

6908 stdio:

Lines 7470-7510javascript

7470];

7471

7472// src/telemetry-events.ts

7473var ContextGroundingTelemetryEvents = {

7474 DefaultAction: "ContextGrounding.DefaultAction",

7475 Setup: "ContextGrounding.Setup",

7476 Exec: "ContextGrounding.Exec",

7477 Help: "ContextGrounding.Help"

7478};

dist/index-sby22td6.jsView file

Lines 608-635javascript

608 }

609}));

610defineLazyProperty(apps, "firefox", () => detectPlatformBinary({

611 darwin: "firefox",

612 win32: String.raw`C:\Program Files\Mozilla Firefox\firefox.exe`

package.jsonView file

Lines 1-31json

2 "name": "@uipath/context-grounding-tool",

3 "license": "SEE LICENSE IN LICENSE.txt",

4 "version": "1.202.0",

5 "description": "Tool for context grounding operations via the UiPath Python SDK",

Source & flagged code

6 flagged · loading source

dist/tool-ead665dg.jsView file

3963var telemetryInstanceSlot = singleton("TelemetryService"); L3964: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L3965: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-ead665dg.jsView on unpkg · L3963

7490telemetryEvent: ContextGroundingTelemetryEvents.Exec, commandRules: COMMAND_RULES, outputFormatOption: "--format", outputFormats: ["json"] }); var registerSetupCommand = createSetupCommand({ telemetryEvent: ContextGroundingTelemetryEvents.Setup, successCode: "ContextGroundingSetup" }); var registerDefaultAction = createDefaultAction({ defaultTelemetryEvent: ContextGroundingTelemetryEvents.DefaultAction, helpTelem

Low

Ai Review Evidence

The tool registers context-grounding setup and execution commands.

dist/tool-ead665dg.jsView on unpkg · L7490

6921wUnknownOption(true).allowExcessArguments(true).trackedAction(processContext, config.telemetryEvent, async (_options, cmd) => { await executeCommand(["_", "_", "exec", ...cmd.args], {}); }); }; return { executeCommand, registerExecCommand }; } // ../uipath-python-bridge/src/python-service.ts import { spawn as spawn2 } from "node:child_process"; import { platform } from "node:os"; class PythonService { cacheFile; config; uipathExePath; packageVersion; constructor(config) {

Findings

2 High2 Medium8 Low

HighBase64 Obscured Urldist/tool-ead665dg.js

HighSemantic Analysis Limiteddist/index-sby22td6.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/index-sby22td6.js

LowAi Review Evidencedist/tool-ead665dg.js

Affected versions and remediation

This report applies to @uipath/context-grounding-tool@1.202.0.

See all versions of @uipath/context-grounding-tool for other recorded verdicts.

Review the evidence and your use of @uipath/context-grounding-tool@1.202.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:48:14.883Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code