registry / @mastra/datadog / 1.3.9

@mastra/datadog@1.3.9

Datadog LLM Observability exporter for Mastra - exports tracing data to Datadog's LLM Observability product

AI Security Review

scanned 24d ago · by lpm-firewall-ai

User-instantiated observability exporter sends configured Mastra tracing data through its declared dd-trace dependency. No malicious or install-time attack surface was confirmed.

Static reason

One or more suspicious static signals were detected.

Trigger

Application imports and constructs DatadogExporter or DatadogBridge, then emits tracing spans.

Impact

Intentional telemetry export to the configured Datadog site; no unconsented credential harvesting or local mutation found.

Mechanism

Configured Datadog LLM observability export

Rationale

The flagged environment and runtime bridge behavior implements the stated Datadog exporter purpose and requires application configuration. Source inspection found no lifecycle hooks or concrete malicious chain.

Evidence

package.jsonREADME.mddist/index.jsdist/index.cjs

Network endpoints1

datadoghq.com

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for warning

Runtime exporter configures dd-trace with supplied Datadog API settings.

@mastra/datadog@1.3.9

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code