registry / @mastra/datadog / 1.4.4

@mastra/datadog@1.4.4

Datadog LLM Observability exporter for Mastra - exports tracing data to Datadog's LLM Observability product

AI Security Review

scanned 8d ago · by lpm-firewall-ai

No malicious attack surface was confirmed. The package is a user-configured observability exporter that sends application tracing data through its declared Datadog dependency.

Static reason

One or more suspicious static signals were detected.

Trigger

Application code constructs DatadogExporter and emits Mastra tracing events.

Impact

Configured telemetry, including span inputs and outputs, may be sent to the selected Datadog service as part of the exporter function.

Mechanism

Datadog LLM observability span export through dd-trace.

Rationale

Source inspection shows a normal Datadog telemetry exporter with no install-time execution or covert collection, persistence, filesystem, shell, or remote-payload behavior. The static environment-variable signal reflects explicit Datadog configuration used after application initialization.

Evidence

package.jsondist/index.jsREADME.md

Network endpoints1

datadoghq.com

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for block

At runtime, the exporter sends selected Mastra span annotations through the Datadog tracing library.

@mastra/datadog@1.4.4

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code