registry / @uipath/conversational-tool / 1.204.0
@uipath/conversational-tool@1.204.0
Handle conversations with deployed UiPath conversational processes.
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe flagged Base64 handling decodes JWT claims, while the network and environment references support UiPath authentication and product telemetry. Source inspection found no lifecycle hook or concrete attack behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes a CLI command or authenticates through the SDK.
Impact
The observed effects are requested conversation operations and product diagnostics; no harmful impact was established.
Mechanism
Commands call the conversational service using UiPath authentication; SDK events include service and account context for telemetry.
AI rationale
The flagged Base64 handling decodes JWT claims, while the network and environment references support UiPath authentication and product telemetry. Source inspection found no lifecycle hook or concrete attack behavior.
Network endpoints2
cloud.uipath.comwesteurope-5.in.applicationinsights.azure.com
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the tool module and CLI entrypoint and declares no lifecycle scripts; the CLI registers product commands for invocation.
- Authentication uses the configured authority or UiPath default, constructs its token endpoints from that authority, and rejects non-HTTPS URLs.
- The flagged Base64 decoding reads the payload section of a JWT to parse claims.
- SDK telemetry sends service and account context to UiPath-hosted Application Insights, including organization, tenant, and user identifiers.
- The browser helper selects among known installed browsers as part of its browser-opening support.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flaggeddist/tool-3m2me0j6.jsView file
4619var telemetryInstanceSlot = singleton("TelemetryService");
L4620: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L4621: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-3m2me0j6.jsView on unpkg · L4619dist/index-h8cph72k.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index-h8cph72k.jsView on unpkgpackage.jsonView file
Findings
2 High2 Medium8 Low
HighBase64 Obscured Urldist/tool-3m2me0j6.js
HighSemantic Analysis Limiteddist/index-h8cph72k.js
MediumNetwork
MediumEnvironment Vars
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencedist/index.js
LowSuspicious Lifecycle Evidencedist/tool-jxy4atfa.js
Affected versions and remediation
This report applies to @uipath/conversational-tool@1.204.0.
See all versions of @uipath/conversational-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/conversational-tool@1.204.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.