registry / @mastra/datadog / 1.4.0

@mastra/datadog@1.4.0

Datadog LLM Observability exporter for Mastra - exports tracing data to Datadog's LLM Observability product

AI Security Review

scanned 22d ago · by lpm-firewall-ai

No malicious attack surface is established. The package is a user-instantiated Datadog observability exporter that may send tracing data through dd-trace.

Static reason

One or more suspicious static signals were detected.

Trigger

Application imports and constructs DatadogExporter or DatadogBridge with Datadog configuration.

Impact

Configured application tracing, inputs, outputs, metadata, and scores may be exported to the configured Datadog service.

Mechanism

Datadog tracing export via dd-trace

Rationale

Direct inspection shows a package-aligned observability integration with no install hooks, filesystem access, shell execution, payload loading, or stealth behavior. Environment-variable findings support explicit Datadog configuration rather than credential harvesting.

Evidence

package.jsondist/index.js

Network endpoints1

datadoghq.com

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

Runtime exporter forwards Mastra tracing data through the declared dd-trace dependency when instantiated.

@mastra/datadog@1.4.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code