registry / @uipath/docsai-tool / 1.202.0
@uipath/docsai-tool@1.202.0
Search UiPath documentation with AI-powered answers.
AI Security Review
scanned 28d ago · by lpm-firewall-aiInspection shows a UiPath documentation CLI with no lifecycle hooks and network use limited to the caller’s authenticated UiPath authority. Bundled process execution is the open helper and a local Windows registry read, which matches the product.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the docsai-tool binary or imports registerCommands and invokes the ask command.
Impact
The query and token stay on the authenticated UiPath host. No install-time mutation, exfiltration, or remote payload execution was found.
Mechanism
After login, the tool calls SearchDocumentation on an MCP URL derived from the configured UiPath authority, organization, and tenant, using the session bearer token.
AI rationale
Inspection shows a UiPath documentation CLI with no lifecycle hooks and network use limited to the caller’s authenticated UiPath authority. Bundled process execution is the open helper and a local Windows registry read, which matches the product.
Network endpoints1
cloud.uipath.com
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json is a module CLI with main and bin under dist and no install lifecycle scripts.
- The ask command sends the caller query to SearchDocumentation only after a logged-in session.
- The docs MCP URL is built from the authenticated UiPath base URL, organization id, and tenant.
- child_process use is the bundled open helper plus a Windows registry query, not a hidden installer.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flagged · loading sourcedist/tool-xrkfnz4j.jsView file
10908var telemetryInstanceSlot = singleton("TelemetryService");
L10909: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L10910: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-xrkfnz4j.jsView on unpkg · L109084945sourceCode = this.opts.code.process(sourceCode, sch);
L4946: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
L4947: const validate = makeValidate(this, this.scope.get());
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/tool-xrkfnz4j.jsView on unpkg · L494522686var MCP_SERVICE_PATH = "agenthub_/mcpfps/docsai";
var MCP_CLIENT_INFO = { name: "uip-docsai", version: "0.1.0" };
function buildMcpUrl(baseUrl, organizationId, tenantName) {
retu
Low
Ai Review Evidence
The docs MCP URL is built from the authenticated UiPath base URL, organization id, and tenant.
dist/tool-xrkfnz4j.jsView on unpkg · L22686Findings
2 High2 Medium8 Low
HighBase64 Obscured Urldist/tool-xrkfnz4j.js
HighSemantic Analysis Limiteddist/index-h8cph72k.js
MediumNetwork
MediumEnvironment Vars
LowEvaldist/tool-xrkfnz4j.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/tool-xrkfnz4j.js
LowAi Review Evidencedist/tool-xrkfnz4j.js
Affected versions and remediation
This report applies to @uipath/docsai-tool@1.202.0.
See all versions of @uipath/docsai-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/docsai-tool@1.202.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.