registry / @uipath/docsai-tool / 1.202.1

@uipath/docsai-tool@1.202.1

Search UiPath documentation with AI-powered answers.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Inspection of package.json and the CLI bundles shows no lifecycle hook and a user-run docs search that uses the login token only against the same configured UiPath base URL. Process spawning is limited to a bundled URL opener and a fixed Windows registry read, which matches the product rather than an attack.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs the docsai-tool binary and the ask command.

Impact

Documentation answers are printed locally. No install-time mutation, secret theft, or remote code execution was found.

Mechanism

The command reads the local login session and calls SearchDocumentation on the matching UiPath MCP endpoint.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json declares a CLI bin and module entrypoints and has no preinstall, install, or postinstall scripts.
The ask command sends the stored UiPath login bearer only to an MCP URL built from that same login base URL, organization, and tenant.
child_process use is the bundled open helper plus a fixed Windows reg query for a UiPath analytics id, not a remote payload.

Evidence against

The shared auth helper accepts any https authority, including a customer Automation Suite host, so the token destination is not a hard-coded UiPath hostname.
A large bundled CLI runtime includes schema compilation via Function and local file writes for auth state.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

Source & flagged code

6 flagged

dist/tool-12cm1ym5.jsView file

10908var telemetryInstanceSlot = singleton("TelemetryService"); L10909: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L10910: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-12cm1ym5.jsView on unpkg · L10908

4945sourceCode = this.opts.code.process(sourceCode, sch); L4946: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L4947: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/tool-12cm1ym5.jsView on unpkg · L4945

22726const url2 = buildMcpUrl(status.baseUrl, status.organizationId, tenantName); const transport = new StreamableHTTPClientTransport(url2, { requestInit: { headers: {

Low

Ai Review Evidence

The ask command sends the stored UiPath login bearer only to an MCP URL built from that same login base URL, organization, and tenant.

dist/tool-12cm1ym5.jsView on unpkg · L22726

dist/index-h8cph72k.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-h8cph72k.jsView on unpkg

package.jsonView file

Lines 1-31json

2 "name": "@uipath/docsai-tool",

3 "license": "SEE LICENSE IN LICENSE.txt",

4 "version": "1.202.1",

5 "description": "Search UiPath documentation with AI-powered answers.",

Source & flagged code

6 flagged · loading source

dist/tool-12cm1ym5.jsView file

10908var telemetryInstanceSlot = singleton("TelemetryService"); L10909: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L10910: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-12cm1ym5.jsView on unpkg · L10908

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/tool-12cm1ym5.jsView on unpkg · L4945

22726const url2 = buildMcpUrl(status.baseUrl, status.organizationId, tenantName); const transport = new StreamableHTTPClientTransport(url2, { requestInit: { headers: {

Low

Ai Review Evidence

The ask command sends the stored UiPath login bearer only to an MCP URL built from that same login base URL, organization, and tenant.

dist/tool-12cm1ym5.jsView on unpkg · L22726

Findings

2 High2 Medium8 Low

HighBase64 Obscured Urldist/tool-12cm1ym5.js

HighSemantic Analysis Limiteddist/index-h8cph72k.js

MediumNetwork

MediumEnvironment Vars

LowEvaldist/tool-12cm1ym5.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/tool-12cm1ym5.js

Affected versions and remediation

This report applies to @uipath/docsai-tool@1.202.1.

See all versions of @uipath/docsai-tool for other recorded verdicts.

Review the evidence and your use of @uipath/docsai-tool@1.202.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:38:08.681Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code