registry / @mastra/code-sdk / 1.14.0
@mastra/code-sdk@1.14.0
Mastra Code SDK: the agent core behind Mastra Code (everything except the TUI) — build your own UIs and surfaces on top of it
AI Security Review
scanned 20d ago · by lpm-firewall-aiStatic flags correspond to provider authentication, enabled-plugin loading, and explicit storage maintenance in the inspected source. The manifest has no install lifecycle scripts, and no concrete attack behavior was found.
Static reason
One or more suspicious static signals were detected.
Trigger
Package use invokes exported SDK APIs; no install lifecycle trigger is declared.
Impact
No unauthorized credential disclosure, account change, or system modification was identified.
Mechanism
Provider code sends stored credentials to provider authentication or API endpoints. Plugin imports require an enabled registry record, and the VM call runs garbage collection in the vacuum maintenance path.
AI rationale
Static flags correspond to provider authentication, enabled-plugin loading, and explicit storage maintenance in the inspected source. The manifest has no install lifecycle scripts, and no concrete attack behavior was found.
Network endpoints3
api.kimi.com/coding/v1api.github.com/userauth.openai.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes dist/index.js and lists no install lifecycle scripts.
- Claude credentials are read from Anthropic auth storage and sent through the Anthropic provider fetch path.
- Kimi credentials are sent through the Kimi Coding provider, whose base URL is api.kimi.com.
- The GitHub refresh token is sent to api.github.com to retrieve the account label; enterprise credentials skip that lookup.
- Codex device authorization uses OpenAI auth endpoints and is reached through the provider’s login flow.
- Plugin modules load only for enabled records; VM execution calls garbage collection behind the explicit vacuum path, and dist/index.js exports SDK APIs.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsTelemetry
Source & flagged code
3 flaggeddist/plugins/loader.jsView file
117url.searchParams.set("mtimeNs", stat.mtimeNs.toString());
L118: const mod = await import(url.href);
L119: return validatePluginExport(mod.default ?? mod.plugin);
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/plugins/loader.jsView on unpkg · L117dist/utils/storage-maintenance.jsView file
1import { getDatabasePath, getVectorDatabasePath } from "./project.js";
L2: import { dirname } from "path";
Medium
Unsafe Vm Context
Package source executes code through a VM context API.
dist/utils/storage-maintenance.jsView on unpkg · L1dist/index.jsView file
Findings
1 High5 Medium6 Low
HighSandbox Evasion Gated Capabilitydist/index.js
MediumDynamic Requiredist/plugins/loader.js
MediumUnsafe Vm Contextdist/utils/storage-maintenance.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @mastra/code-sdk@1.14.0.
See all versions of @mastra/code-sdk for other recorded verdicts.
- Review the evidence and your use of @mastra/code-sdk@1.14.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.