@mastra/deployer-cloud@1.81.0
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe optional Studio UI starts PostHog telemetry automatically with autocapture enabled, which is a real but warning-level privacy risk. The reviewed code provides a browser-level opt-out and does not show credentials or application records flowing to the analytics host.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A deployed Studio UI is loaded and its analytics component mounts.
Impact
PostHog may receive automatically captured UI interaction data. The inspected code does not show service credentials or application records being sent.
Mechanism
The UI initializes PostHog with autocapture enabled and sends analytics to https://us.posthog.com. The browser setting MASTRA_TELEMETRY_DISABLED can turn it off.
AI rationale
The optional Studio UI starts PostHog telemetry automatically with autocapture enabled, which is a real but warning-level privacy risk. The reviewed code provides a browser-level opt-out and does not show credentials or application records flowing to the analytics host.
Evidence
dist/studio/assets/main-DW8Ek0u0.jsdist/index.js
Network endpoints1
us.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- When the Studio UI mounts, it initializes PostHog at https://us.posthog.com and registers mastraSource: playground.
- The bundled PostHog configuration enables autocapture by default.
- The package lets users disable Studio telemetry with the MASTRA_TELEMETRY_DISABLED browser setting.
Evidence against
- Studio is disabled by default and must be explicitly enabled in the deployer configuration.
- The package entry point reads service-token environment variables to configure authentication; no evidence shows those tokens being sent to PostHog.
- No install, preinstall, or postinstall scripts are declared.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
5 flaggeddist/studio/assets/main-DW8Ek0u0.jsView file
•Credential-bearing message sent to a fixed external iframe in dist/studio/assets/main-DW8Ek0u0.js:
import{a as e,i as t,n,r,t as i}from"./rolldown-runtime-BWaJ3C7D.js";import{t as a}from"./preload-helper-CRzLMJPS.js";import{$t as o,At as s,B as c,Bt as l,C as u,Ct as d,Dt as f,E...
`+e.stack}}var ke=Object.prototype.hasOwnProperty,Ae=t.unstable_scheduleCallback,je=t.unstable_cancelCallback,Me=t.unstable_shouldYield,Ne=t.unstable_requestPaint,Pe=t.unstable_now...
]))`;continue}}n.s&&r[e]===`.`?i+=o?`${r[e]}\r\n`:`[${r[e]}\r\n]`:(i+=r[e],r[e]===`\\`?a=!0:o&&r[e]===`]`?o=!1:!o&&r[e]===`[`&&(o=!0))}try{new RegExp(i)}catch{return console.warn(`...
Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let n of e.seen.entries()){let r=n[1];if(t===n[0])a(n);else{if
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/studio/assets/main-DW8Ek0u0.jsView on unpkg•path = dist/studio/assets/main-DW8Ek0u0.js
kind = oversized_source_file
sizeBytes = 6454004
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/studio/assets/main-DW8Ek0u0.jsView on unpkgFindings
1 Critical7 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationdist/studio/assets/main-DW8Ek0u0.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/studio/assets/main-DW8Ek0u0.js
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/studio/assets/main-DW8Ek0u0.js
MediumAi Review Evidencedist/studio/assets/main-DW8Ek0u0.js
MediumAi Review Evidencedist/studio/assets/main-DW8Ek0u0.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @mastra/deployer-cloud@1.81.0.
See all versions of @mastra/deployer-cloud for other recorded verdicts.
- Review the evidence and your use of @mastra/deployer-cloud@1.81.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.