registry / @mastra/code-sdk / 1.15.0
@mastra/code-sdk@1.15.0
⚠ Under reviewMastra Code SDK: the agent core behind Mastra Code (everything except the TUI) — build your own UIs and surfaces on top of it
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe package source inspected here does not establish an attack, and the platform client’s configurable host alone is not proof of credential theft. The selected @mastra/core runtime dependency remains unresolved, which prevents a clean verdict under the dependency review policy.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Importing the package entrypoint loads components from @mastra/core.
Impact
The unresolved dependency prevents a grounded clean assessment of the complete runtime.
Mechanism
The entrypoint imports several @mastra/core modules, but the available dependency inspection did not resolve that package’s source.
AI rationale
The package source inspected here does not establish an attack, and the platform client’s configurable host alone is not proof of credential theft. The selected @mastra/core runtime dependency remains unresolved, which prevents a clean verdict under the dependency review policy.
Evidence
package.jsondist/index.js
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares @mastra/core as a runtime dependency.
- The package entrypoint imports multiple runtime components from @mastra/core; its source was unresolved in the supplied dependency inspection.
Evidence against
- The inspected package manifest has no preinstall, install, or postinstall script.
- The platform client defaults to Mastra’s platform host; the inspected source does not establish a package-set custom host.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
6 flaggeddist/platform/index.jsView file
1import { join } from "path";
L2: import { execFile } from "child_process";
L3: import { homedir } from "os";
High
Child Process
Package source references child process execution.
dist/platform/index.jsView on unpkg · L11import { join } from "path";
L2: import { execFile } from "child_process";
L3: import { homedir } from "os";
L4: import { chmod, mkdir, readFile, writeFile } from "fs/promises";
L5: import { createServer } from "http";
L6: //#region src/platform/index.ts
...
L13: */
L14: const MASTRA_PLATFORM_API_URL = process.env.MASTRA_PLATFORM_API_URL || "https://platform.mastra.ai";
L15: const CREDENTIALS_DIR = join(homedir(), ".mastra");
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/platform/index.jsView on unpkg · L1•matchType = previous_version_dangerous_delta
matchedPackage = @mastra/code-sdk@1.14.0
matchedIdentity = npm:QG1hc3RyYS9jb2RlLXNkaw:1.14.0
similarity = 0.592
summary = stored previous version shares package body but lacks this dangerous source file
Findings
5 High5 Medium6 Low
HighChild Processdist/platform/index.js
HighShell
HighSame File Env Network Executiondist/platform/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighPrevious Version Dangerous Deltadist/platform/index.js
MediumDynamic Requiredist/plugins/loader.js
MediumUnsafe Vm Contextdist/utils/storage-maintenance.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
Affected versions and remediation
This report applies to @mastra/code-sdk@1.15.0.
See all versions of @mastra/code-sdk for other recorded verdicts.
- Review the evidence and your use of @mastra/code-sdk@1.15.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.