registry / langchain_agentx_stream_ui / 0.6.8

langchain_agentx_stream_ui@0.6.8

React session timeline component library for LangchainAgentEvent SSE streams

AI Security Review

scanned 14h ago · by lpm-firewall-ai

Rendered PlantUML content is automatically sent to a third-party default endpoint and its SVG response is injected as HTML. This creates a concrete content-disclosure and untrusted-SVG rendering surface at runtime.

Static reason

No blocking static signals were detected.

Trigger

Consumer renders PlantUML Markdown through the package UI.

Impact

Potential disclosure of rendered agent content to kroki.io and DOM XSS risk if the SVG response is attacker-controlled.

Mechanism

POST PlantUML source to Kroki and inject returned SVG

Rationale

The package is not malicious or install-time persistent, but its default PlantUML renderer creates a concrete third-party data-transfer and unsafe SVG injection surface. Warn rather than block.

Evidence

package.jsondist/chunk-VBUKRPEO.jsREADME.md

Network endpoints1

kroki.io

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

dist/chunk-VBUKRPEO.js posts PlantUML source to default https://kroki.io.

langchain_agentx_stream_ui@0.6.8

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code