registry / @uipath/context-grounding-tool / 1.202.1

@uipath/context-grounding-tool@1.202.1

Tool for context grounding operations via the UiPath Python SDK

AI Security Review

scanned 28d ago · by lpm-firewall-ai

The published files are a UiPath CLI wrapper with no install lifecycle hooks. Process spawning and token refresh stay on the local SDK and the user's https UiPath authority.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs the context-grounding-tool binary or imports the module and calls registerCommands.

Impact

No unconsented install mutation, credential theft, or remote payload execution was found.

Mechanism

Commands are forwarded to a previously configured local uipath executable, and OAuth refresh uses the validated https UiPath token endpoint.

AI rationale

The published files are a UiPath CLI wrapper with no install lifecycle hooks. Process spawning and token refresh stay on the local SDK and the user's https UiPath authority.

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json declares only a module entry and a context-grounding-tool bin, with no preinstall, install, or postinstall scripts.
The CLI registers context-grounding setup, exec, and help, then spawns a locally cached uipath Python executable with the user command arguments.
Token refresh posts to the configured UiPath identity token endpoint, defaulting to https://cloud.uipath.com and requiring https.
dist/index-sby22td6.js is the bundled open helper that launches a local browser with fixed platform commands.

Evidence against

Child process use is limited to the user-invoked local uipath executable and OS open helpers, not an install-time payload.
No eval, dynamic remote code load, self-dependency, or agent config mutation appears in the package.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

6 flagged

dist/tool-c9kbmw6b.jsView file

Lines 3943-3983javascript

3943 }

3944 getState().commandStart = performance.now();

3945}

3946function recordCommandDuration(durationMs) {

3947 if (!timingsEnabled()) {

3948 return;

3949 }

3950 getState().commandMs = durationMs;

3951}

3952// ../common/src/telemetry/proxy-http-agent.ts

3953var slot = singleton("ProxyAuthHttpsAgent");

3954

3955// ../common/src/telemetry/node-appinsights-telemetry-provider.ts

3956var providerSlot = singleton("TelemetryProvider");

3957

3958// ../common/src/telemetry/telemetry-spool.ts

3959var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

3960var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

3961

3962// ../common/src/telemetry/telemetry-init.ts

3963var telemetryInstanceSlot = singleton("TelemetryService");

3964var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

3965function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-c9kbmw6b.jsView on unpkg · L3963

3966 const existing = telemetryInstanceSlot.get();

3967 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

3968 return existing;

3969 }

3970 return;

3971}

3972function setGlobalTelemetryInstance(instance) {

3973 telemetryInstanceSlot.set(instance);

3974}

3975var _localTelemetryInstance;

3976function getTelemetryInstance() {

3977 const global = getGlobalTelemetryInstance();

3978 if (global)

3979 return global;

3980 if (!_localTelemetryInstance) {

3981 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

3982 setGlobalTelemetryInstance(_localTelemetryInstance);

3983 }

Lines 5406-5446javascript

5406 return settlePromiseLike2(result);

5407 }

5408 return [undefined, result];

5409 } catch (error) {

5410 return [

5411 error instanceof Error ? error

Lines 6825-6865javascript

6825 const { authEnv, loginStatus: loginStatus2 } = await getAuthEnv();

6826 if (!loginStatus2) {

6827 logger.debug("Auth unavailable, continuing without credentials.");

6828 }

Lines 7461-7501javascript

7461};

7462

7463// src/config.ts

7464var COMMAND_RULES = [

7465 {

7466 pattern: ["auth"],

7467 action: "filter",

7468 filterMessage: "Use 'uip login' for authentication."

7469 }

7470

dist/index-sby22td6.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-sby22td6.jsView on unpkg

package.jsonView file

Lines 1-31json

2 "name": "@uipath/context-grounding-tool",

3 "license": "SEE LICENSE IN LICENSE.txt",

4 "version": "1.202.1",

5 "description": "Tool for context grounding operations via the UiPath Python SDK",

Source & flagged code

6 flagged · loading source

dist/tool-c9kbmw6b.jsView file

3963var telemetryInstanceSlot = singleton("TelemetryService"); L3964: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L3965: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-c9kbmw6b.jsView on unpkg · L3963

7481var COMMAND_PREFIX = "context-grounding"; var metadata = { name: "context-grounding-tool", version: package_default.version, description: "A tool for context grounding operat

Low

Ai Review Evidence

The CLI registers context-grounding setup, exec, and help, then spawns a locally cached uipath Python executable with the user command arguments.

dist/tool-c9kbmw6b.jsView on unpkg · L7481

6845const proc = spawn(cache.uipathExePath, commandArgs, { cwd, env: { ...process.env, ...authEnv, ...requiredEnv }, stdio: stdi

Low

Ai Review Evidence

The CLI registers context-grounding setup, exec, and help, then spawns a locally cached uipath Python executable with the user command arguments.

dist/tool-c9kbmw6b.js

Findings

2 High2 Medium8 Low

HighBase64 Obscured Urldist/tool-c9kbmw6b.js

HighSemantic Analysis Limiteddist/index-sby22td6.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/tool-c9kbmw6b.js

Affected versions and remediation

This report applies to @uipath/context-grounding-tool@1.202.1.

See all versions of @uipath/context-grounding-tool for other recorded verdicts.

Review the evidence and your use of @uipath/context-grounding-tool@1.202.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:48:33.897Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code