registry / @mastra/code-sdk / 1.8.3
@mastra/code-sdk@1.8.3
Mastra Code SDK: the agent core behind Mastra Code (everything except the TUI) — build your own UIs and surfaces on top of it
AI Security Review
scanned 1mo ago · by lpm-firewall-aiStatic inspection found no lifecycle hook, self-dependency chain, automatic payload execution, exfiltration sink, or malicious persistence behavior. The observed capabilities are consistent with a configurable agent SDK.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A consumer must import the SDK and call its controller or settings APIs.
Impact
No confirmed malicious impact was established.
Mechanism
The inspected code initializes a configured controller and atomically persists settings; no install-time execution or unconsented foreign control-surface write was found.
AI rationale
Static inspection found no lifecycle hook, self-dependency chain, automatic payload execution, exfiltration sink, or malicious persistence behavior. The observed capabilities are consistent with a configurable agent SDK.
Evidence
dist/onboarding/settings.js
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a JavaScript SDK entrypoint and contains build, check, test, and lint scripts only; no install lifecycle hook is declared.
- The main module constructs the agent controller only through an exported asynchronous factory invoked by consumers.
- Settings are saved through a supplied or default settings path using an atomic temporary-file rename.
Evidence against
- The SDK includes user-invoked agent-controller and settings capabilities, but no automatic execution, credential exfiltration, or foreign agent-control-surface mutation was established.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggeddist/plugins/loader.jsView file
118url.searchParams.set("mtimeNs", stat.mtimeNs.toString());
L119: const mod = await import(url.href);
L120: return validatePluginExport(mod.default ?? mod.plugin);
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/plugins/loader.jsView on unpkg · L1181import { getPluginRoot } from "./paths.js";
L2: import { loadPluginRegistry, mergePluginRegistries } from "./registry.js";
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/plugins/loader.jsView on unpkg · L1dist/index.jsView file
164* The env vars are deliberately namespaced `MASTRACODE_*`, not `MASTRA_*`: the
L165: * cwd `.env` is loaded into `process.env`, so reading `MASTRA_PROJECT_ID` /
L166: * `MASTRA_CLOUD_ACCESS_TOKEN` would export Mastra Code's own traces into
...
L220: async function createMastraCodeAgentController(config) {
L221: const cwd = config?.cwd ?? process.cwd();
L222: const homeDir = config?.homeDir ?? config?.initialState?.homeDir;
...
L257: const mastraCodeGateway = createMastraCodeGateway({
L258: mastraGatewayBaseUrl: (process.env["MASTRA_GATEWAY_URL"] ?? storedGatewayUrl ?? "https://gateway-api.mastra.ai").replace(/\/+$/, "").replace(/\/v1$/, ""),
L259: mastraGatewayApiKey: mgApiKey,
...
L271: const sessionId = `mastracode-session-${shortHash(project.resourceId)}`;
L272: const ownerId = `m
Findings
2 High4 Medium6 Low
HighSandbox Evasion Gated Capabilitydist/index.js
HighPrevious Version Dangerous Deltadist/onboarding/settings.js
MediumDynamic Requiredist/plugins/loader.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/plugins/loader.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @mastra/code-sdk@1.8.3.
See all versions of @mastra/code-sdk for other recorded verdicts.
- Review the evidence and your use of @mastra/code-sdk@1.8.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.