registry / @uipath/conversational-tool / 1.200.0
@uipath/conversational-tool@1.200.0
Handle conversations with deployed UiPath conversational processes.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiStatic inspection found a user-invoked UiPath conversation CLI with no lifecycle hook. Credentialed download requests enforce a same-origin restriction.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the package CLI or library API.
Impact
No unconsented install-time execution, credential export, persistence, or destructive behavior was found.
Mechanism
The package registers conversation commands and uses the configured service origin for authenticated requests.
AI rationale
Static inspection found a user-invoked UiPath conversation CLI with no lifecycle hook. Credentialed download requests enforce a same-origin restriction.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a library and CLI entry point and contains no lifecycle scripts.
- The conversation client refuses to send its bearer token to a download URL outside the configured origin.
- Conversation operations are registered as explicit CLI commands requiring user input.
- The required utility module exports filesystem, error, and local-server helpers; no hidden package startup is exposed.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/index-jw0e6bmh.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @uipath/conversational-tool@1.201.0
matchedIdentity = npm:[redacted]:1.201.0
similarity = 0.611
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index-jw0e6bmh.jsView on unpkg17var Url = __require("url");
L18: var spawn = __require("child_process").spawn;
L19: module.exports = XMLHttpRequest2;
High
Child Process
Package source references child process execution.
dist/index-jw0e6bmh.jsView on unpkg · L17dist/tool-2r5cegqd.jsView file
26Cross-file remote execution chain: dist/tool-2r5cegqd.js spawns dist/index-jw0e6bmh.js; helper contains network access plus dynamic code execution.
L26: class CommanderError extends Error {
L27: constructor(exitCode, code, message) {
L28: super(message);
...
L744: var EventEmitter = __require("node:events").EventEmitter;
L745: var childProcess = __require("node:child_process");
L746: var path = __require("node:path");
...
L790: this._outputConfiguration = {
L791: writeOut: (str) => process2.stdout.write(str),
L792: writeErr: (str) => process2.stderr.write(str),
...
L2115: });
L2116: // package.json
L2117: var package_default = {
Findings
1 Critical4 High2 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index-jw0e6bmh.js
HighChild Processdist/index-jw0e6bmh.js
HighCross File Remote Execution Contextdist/tool-2r5cegqd.js
HighBase64 Obscured Urldist/tool-2r5cegqd.js
HighSemantic Analysis Limiteddist/tool-4f38v0ry.js
MediumNetwork
MediumEnvironment Vars
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @uipath/conversational-tool@1.200.0.
See all versions of @uipath/conversational-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/conversational-tool@1.200.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.