registry / @uipath/docsai-tool / 1.196.0

@uipath/docsai-tool@1.196.0

Search UiPath documentation with AI-powered answers.

AI Security Review

scanned 19d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime network/auth behavior is aligned with a UiPath documentation search CLI that uses existing UiPath login credentials.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs docsai-tool/docsai ask with a query

Impact

User query and UiPath bearer token are sent to the configured UiPath tenant DocsAI endpoint during the requested command.

Mechanism

UiPath DocsAI MCP client over authenticated Streamable HTTP

Rationale

Static inspection shows suspicious primitives are bundled dependencies or expected UiPath auth/MCP functionality for the documented CLI. There is no install-time execution, hidden exfiltration, persistence, destructive action, or concrete malicious behavior.

Evidence

package.jsondist/index.jsdist/tool.js.uipath/.auth

Network endpoints3

cloud.uipath.comwest europe-5.in.applicationinsights.azure.com/westeurope.livediagnostics.monitor.azure.com/

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence with false-positive risk.

@uipath/docsai-tool@1.196.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code