registry / @uipath/conversational-tool / 1.201.0
@uipath/conversational-tool@1.201.0
Handle conversations with deployed UiPath conversational processes.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe static signals are attributable to bundled CLI telemetry and normal Node helper code. There are no lifecycle hooks or source evidence of covert execution, credential theft, persistence, or destructive behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the conversational-tool CLI and invokes a command that emits telemetry.
Impact
The CLI may send operational telemetry to UiPath's Application Insights service.
Mechanism
CLI telemetry event submission
AI rationale
The static signals are attributable to bundled CLI telemetry and normal Node helper code. There are no lifecycle hooks or source evidence of covert execution, credential theft, persistence, or destructive behavior.
Network endpoints1
westeurope-5.in.applicationinsights.azure.com
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The bundled telemetry component can post event payloads to UiPath's Azure Application Insights endpoint during CLI use.
- A Base64-decoded string configures telemetry support code, rather than loading executable content.
- The manifest exposes library and CLI entry points and contains no install lifecycle scripts.
- The analysis-limited bundle is a bundled open utility that imports Node process APIs; no automatic invocation was found.
Evidence against
- No preinstall, install, postinstall, or self-dependency is present.
- No credential harvesting, arbitrary command execution, destructive action, or remote code loading was found.
- Network behavior is telemetry and authenticated service communication initiated through the CLI.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/tool-np086x9g.jsView file
3745var telemetryInstanceSlot = singleton("TelemetryService");
L3746: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L3747: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-np086x9g.jsView on unpkg · L37453744// ../common/src/telemetry/telemetry-init.ts
var telemetryInstanceSlot = singleton("TelemetryService");
var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]");
Low
Ai Review Evidence
A Base64-decoded string configures telemetry support code, rather than loading executable content.
dist/tool-np086x9g.jsView on unpkg · L3744dist/index-hsadteg4.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
Findings
2 High2 Medium7 Low
HighBase64 Obscured Urldist/tool-np086x9g.js
HighSemantic Analysis Limiteddist/index-hsadteg4.js
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencedist/tool-a8ky4eng.js
LowAi Review Evidencedist/tool-np086x9g.js
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index-hsadteg4.js
Affected versions and remediation
This report applies to @uipath/conversational-tool@1.201.0.
See all versions of @uipath/conversational-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/conversational-tool@1.201.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.