registry / @mastra/code-sdk

@mastra/code-sdk

Mastra Code SDK: the agent core behind Mastra Code (everything except the TUI) — build your own UIs and surfaces on top of it

This report shows the evidence for @mastra/code-sdk@1.18.0. 0 of 26 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 1d ago · by lpm-firewall-ai

The flagged execution and credential flows support the package’s agent SDK, provider, and platform functions. The reviewed flows send credentials to their corresponding services, and the package declares no install lifecycle hook.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Explicit use of SDK operations, provider requests, or the analytics API.

Impact

Expected service requests for the features the caller invokes; no unauthorized credential forwarding or automatic destructive action was found.

Mechanism

Provider credentials go to the selected provider; platform credentials go to the Mastra platform API. Gateway routing is disabled by default.

AI rationale

Network endpoints4

platform.mastra.aigateway-api.mastra.aiapi.moonshot.aius.posthog.com

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package manifest contains build, check, test, and lint scripts; no install lifecycle hook is declared.
Platform credential verification sends a Mastra platform token to the Mastra platform API when a platform session is requested.
The Moonshot key is used only for the selected Moonshot provider and sent to api.moonshot.ai.
The agent controller and its initialization are exposed as callable SDK operations; no import-time attack behavior was identified.
The default Mastra gateway configuration sets routeThroughMastraGateway to false.
The analytics factory honors MASTRA_TELEMETRY_DISABLED; no automatic call to that factory was found in the entry point.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetry

Source & flagged code

6 flagged

dist/platform/index.jsView file

1import { join } from "path"; L2: import { execFile } from "child_process"; L3: import { homedir } from "os";

High

Child Process

Package source references child process execution.

dist/platform/index.jsView on unpkg · L1

1import { join } from "path"; L2: import { execFile } from "child_process"; L3: import { homedir } from "os"; L4: import { chmod, mkdir, readFile, writeFile } from "fs/promises"; L5: import { createServer } from "http"; L6: // src/platform/index.ts ... L13: */ L14: const MASTRA_PLATFORM_API_URL = process.env.MASTRA_PLATFORM_API_URL || "https://platform.mastra.ai"; L15: const CREDENTIALS_DIR = join(homedir(), ".mastra");

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/platform/index.jsView on unpkg · L1

dist/plugins/loader.jsView file

119

Findings

5 High5 Medium6 Low

HighChild Processdist/platform/index.js

HighShell

HighSame File Env Network Executiondist/platform/index.js

HighSandbox Evasion Gated Capabilitydist/index.js

HighPrevious Version Dangerous Deltadist/onboarding/settings.js

MediumDynamic Requiredist/plugins/loader.js

MediumUnsafe Vm Contextdist/utils/storage-maintenance.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

Affected versions and remediation

This report applies to @mastra/code-sdk@1.18.0.

The versions list below shows the verdict for each recorded version.

Review the evidence and your use of @mastra/code-sdk@1.18.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-04 00:05:21.377Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

26 known versions

1.18.0latestshownClean—AllowPublishedNov 3, 2026, 11:57 PM 1.17.0SuspiciousTelemetryWarnPublishedOct 30, 2026, 11:21 PM 1.15.0Manual Review—AllowUnder ReviewOct 21, 2026, 11:53 AM 1.14.0Clean—AllowPublishedOct 15, 2026, 11:10 PM

registry / @mastra/code-sdk

@mastra/code-sdk

Mastra Code SDK: the agent core behind Mastra Code (everything except the TUI) — build your own UIs and surfaces on top of it

This report shows the evidence for @mastra/code-sdk@1.18.0. 0 of 26 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 1d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Explicit use of SDK operations, provider requests, or the analytics API.

Impact

Expected service requests for the features the caller invokes; no unauthorized credential forwarding or automatic destructive action was found.

Mechanism

Provider credentials go to the selected provider; platform credentials go to the Mastra platform API. Gateway routing is disabled by default.

AI rationale

Network endpoints4

platform.mastra.aigateway-api.mastra.aiapi.moonshot.aius.posthog.com

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package manifest contains build, check, test, and lint scripts; no install lifecycle hook is declared.
Platform credential verification sends a Mastra platform token to the Mastra platform API when a platform session is requested.
The Moonshot key is used only for the selected Moonshot provider and sent to api.moonshot.ai.
The agent controller and its initialization are exposed as callable SDK operations; no import-time attack behavior was identified.
The default Mastra gateway configuration sets routeThroughMastraGateway to false.
The analytics factory honors MASTRA_TELEMETRY_DISABLED; no automatic call to that factory was found in the entry point.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetry

Source & flagged code

6 flagged

dist/platform/index.jsView file

1import { join } from "path"; L2: import { execFile } from "child_process"; L3: import { homedir } from "os";

High

Child Process

Package source references child process execution.

dist/platform/index.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/platform/index.jsView on unpkg · L1

dist/plugins/loader.jsView file

119

Findings

5 High5 Medium6 Low

HighChild Processdist/platform/index.js

HighShell

HighSame File Env Network Executiondist/platform/index.js

HighSandbox Evasion Gated Capabilitydist/index.js

HighPrevious Version Dangerous Deltadist/onboarding/settings.js

MediumDynamic Requiredist/plugins/loader.js

MediumUnsafe Vm Contextdist/utils/storage-maintenance.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

Affected versions and remediation

This report applies to @mastra/code-sdk@1.18.0.

The versions list below shows the verdict for each recorded version.

Review the evidence and your use of @mastra/code-sdk@1.18.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-04 00:05:21.377Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

26 known versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

More from @mastra

Behavioral surface

Related packages

More from @mastra