registry / @mastra/code-sdk / 1.13.0
@mastra/code-sdk@1.13.0
Mastra Code SDK: the agent core behind Mastra Code (everything except the TUI) — build your own UIs and surfaces on top of it
AI Security Review
scanned 22d ago · by lpm-firewall-aiThe package has no install lifecycle hook or unrequested credential transfer in the reviewed provider flows. The flagged signals resolve to provider OAuth, enabled-plugin loading, vacuum maintenance, and a hashed host identifier used for ownership.
Static reason
One or more suspicious static signals were detected.
Trigger
Exported provider APIs run when a consumer invokes authentication or model requests.
Impact
No malicious impact was identified.
Mechanism
Provider credentials are used in provider authentication flows; no unrelated recipient or install-time execution was established.
AI rationale
The package has no install lifecycle hook or unrequested credential transfer in the reviewed provider flows. The flagged signals resolve to provider OAuth, enabled-plugin loading, vacuum maintenance, and a hashed host identifier used for ownership.
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json’s complete scripts object contains build, check, test, and lint commands; it has no install lifecycle hook.
- Claude’s OAuth wrapper uses stored credentials on the SDK-supplied request URL, and the provider wires that wrapper into model requests.
- Kimi uses a fixed Kimi API base URL; its provider wires credential wrappers into model requests that pass through the supplied URL.
- GitHub OAuth credentials go to GitHub-derived endpoints; the optional enterprise domain is prompted for and validated during login.
- Codex device authorization uses fixed OpenAI authentication endpoints and is reached through the login API.
- The host-derived value in the main entrypoint is a hashed owner identifier; dynamic plugin loading is gated on enabled records, and the VM garbage-collection helper is part of vacuum maintenance.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
3 flaggeddist/plugins/loader.jsView file
117url.searchParams.set("mtimeNs", stat.mtimeNs.toString());
L118: const mod = await import(url.href);
L119: return validatePluginExport(mod.default ?? mod.plugin);
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/plugins/loader.jsView on unpkg · L117dist/utils/storage-maintenance.jsView file
1import { getDatabasePath, getVectorDatabasePath } from "./project.js";
L2: import { dirname } from "path";
Medium
Unsafe Vm Context
Package source executes code through a VM context API.
dist/utils/storage-maintenance.jsView on unpkg · L1dist/index.jsView file
Findings
1 High5 Medium6 Low
HighSandbox Evasion Gated Capabilitydist/index.js
MediumDynamic Requiredist/plugins/loader.js
MediumUnsafe Vm Contextdist/utils/storage-maintenance.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @mastra/code-sdk@1.13.0.
See all versions of @mastra/code-sdk for other recorded verdicts.
- Review the evidence and your use of @mastra/code-sdk@1.13.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.