registry / @uipath/llmgw-tool / 1.201.0
@uipath/llmgw-tool@1.201.0
CLI plugin for UiPath AI Trust Layer Bring-Your-Own LLM connections.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe suspicious primitives are consistent with an authenticated UiPath CLI plugin. There is no lifecycle hook or concrete malicious execution, exfiltration, or persistence path.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs a registered llm-configuration command.
Impact
The intended tenant configuration may be created, updated, listed, or deleted by explicit CLI commands.
Mechanism
Authenticated requests to the configured UiPath service.
AI rationale
The suspicious primitives are consistent with an authenticated UiPath CLI plugin. There is no lifecycle hook or concrete malicious execution, exfiltration, or persistence path.
Network endpoints3
cloud.uipath.comwesteurope-5.in.applicationinsights.azure.comwesteurope.livediagnostics.monitor.azure.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes only a dist module entrypoint and contains no lifecycle script.
- The bundle contains a Base64-encoded telemetry connection string.
- A separate bundled helper imports child-process APIs.
Evidence against
- The decoded telemetry default is not used by the instantiated provider, which logs telemetry locally.
- Network requests are made by user-invoked CLI commands to the configured UiPath authority with the user's bearer token.
- The CLI registers explicit BYO LLM configuration commands; no install-time execution, persistence, arbitrary code loading, or unrelated credential exfiltration was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcedist/tool-3p87hvdj.jsView file
3923var telemetryInstanceSlot = singleton("TelemetryService");
L3924: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L3925: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-3p87hvdj.jsView on unpkg · L39233922// ../../common/src/telemetry/telemetry-init.ts
var telemetryInstanceSlot = singleton("TelemetryService");
var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]");
Low
Ai Review Evidence
The bundle contains a Base64-encoded telemetry connection string.
dist/tool-3p87hvdj.jsView on unpkg · L3922dist/index-91ejywfm.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
2 High2 Medium6 Low
HighBase64 Obscured Urldist/tool-3p87hvdj.js
HighSemantic Analysis Limiteddist/index-91ejywfm.js
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/tool-3p87hvdj.js
LowAi Review Evidencedist/index-91ejywfm.js
Affected versions and remediation
This report applies to @uipath/llmgw-tool@1.201.0.
See all versions of @uipath/llmgw-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/llmgw-tool@1.201.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.