registry / @mastra/deployer-sandbox / 0.1.3
@mastra/deployer-sandbox@0.1.3
Deploy a Mastra server into any workspace sandbox that supports networking and get a live public URL
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource implements the documented, explicitly invoked sandbox deployer behavior and has no install-time execution. Network, environment, shell, and token handling are caller-configured features with no covert malicious chain found.
Static reason
One or more suspicious static signals were detected.
Trigger
Explicit SandboxDeployer/deployToSandbox or client-helper invocation
Impact
Can run the caller's build and install command in that caller-configured remote sandbox.
Mechanism
sandbox deployment, optional Edge Config update, and server-side proxying
AI rationale
Source implements the documented, explicitly invoked sandbox deployer behavior and has no install-time execution. Network, environment, shell, and token handling are caller-configured features with no covert malicious chain found.
Evidence
package.jsondist/index.jsdist/shared-C-piQAcU.jsdist/client/index.jsREADME.md.env.env.production.env.localsandbox-deployment.json{remoteDir}/.deploy.tgz{remoteDir}/.mastra-server.sh{remoteDir}/.mastra-server.pid{remoteDir}/.mastra-server.log
Network endpoints1
api.vercel.com/v1/edge-config/{edgeConfigId}/items
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- dist/index.js deploys supplied build output and runs an explicit install command inside the supplied sandbox.
- dist/index.js optionally sends a caller-provided Vercel token to Edge Config.
- dist/client/index.js proxies requests only when its exported helpers are invoked.
Evidence against
- package.json has no install lifecycle hooks or bin entrypoint.
- Entrypoints only define exports; no deployment, network call, or credential access occurs on import.
- dist/index.js uses caller-provided sandbox, directory, environment, and alias options.
- dist/shared-C-piQAcU.js shell commands are confined to the caller-supplied sandbox deployment workflow.
- No source evidence of local credential harvesting, covert exfiltration, payload download, or agent-control mutation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
3 flaggeddist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView file
13patternName = generic_password
severity = medium
line = 13
matchedText = `},e.par...+`\r
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView on unpkg · L13dist/studio/assets/tsx-B6W0miNI.jsView file
1const e=Object.freeze(JSON.parse(`{"displayName":"TSX","name":"tsx","patterns":[{"include":"#directives"},{"include":"#statements"},{"include":"#shebang"}],"repository":{"access-mo...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/studio/assets/tsx-B6W0miNI.jsView on unpkg · L1dist/studio/assets/main-n0iDoxTR.jsView file
Findings
7 Medium5 Low
MediumSecret Patterndist/studio/assets/livekit-client.esm-CKIgC2IJ.js
MediumDynamic Requiredist/studio/assets/tsx-B6W0miNI.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumOversized Source Filedist/studio/assets/main-n0iDoxTR.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @mastra/deployer-sandbox@0.1.3.
See all versions of @mastra/deployer-sandbox for other recorded verdicts.
- Review the evidence and your use of @mastra/deployer-sandbox@0.1.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.