@mastra/deployer@1.64.0
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe proxy’s default recipient is package-aligned and use is runtime-triggered, but its configurable upstream is unrestricted while the platform token is forwarded. This warrants a warning for conditional credential exposure, not a block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A request reaches the Agent Learning proxy on a loopback host while the platform token and project ID are configured.
Impact
If configured to an unintended recipient, the endpoint receives the platform access token and project ID.
Mechanism
The handler builds an upstream URL from the configured endpoint and sends the access token in an Authorization bearer header.
AI rationale
The proxy’s default recipient is package-aligned and use is runtime-triggered, but its configurable upstream is unrestricted while the platform token is forwarded. This warrants a warning for conditional credential exposure, not a block.
Evidence
dist/server/index.js
Network endpoints1
output.signals.mastra.ai
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes the server bundle and declares build scripts, with no install lifecycle hook.
- The server proxy requires platform credentials and accepts an environment-configured endpoint with a Mastra service default.
- The proxy sends the platform access token as a bearer credential to the selected upstream endpoint.
- The server proxy is limited to loopback requests and rejects cross-origin requests.
Evidence against
- The endpoint override requires runtime configuration, and the proxy requires both platform credentials; the default endpoint is Mastra’s service.
- The package’s npm install command is inside an explicit lockfile-generation method that runs against its output directory.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flagged · loading sourcedist/utils-O98BGdnP.cjsView file
1require("child_process");
L2: require("fs");
High
Child Process
Package source references child process execution.
dist/utils-O98BGdnP.cjsView on unpkg · L1dist/analyze-z37DoML5.jsView file
342"#tools",
L343: "execa",
L344: "effect",
High
dist/validator/custom-resolver.cjsView file
1Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
L2: const require_utils = require("../utils-O98BGdnP.cjs");
L3: let fs = require("fs");
Findings
1 Critical5 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/server/index.js
HighChild Processdist/utils-O98BGdnP.cjs
HighShelldist/analyze-z37DoML5.js
HighCross File Remote Execution Contextdist/analyze-IM-jyN5x.cjs
HighRuntime Package Installdist/bundler/index.js
HighSemantic Analysis Limitedpackage.json
MediumDynamic Requiredist/validator/custom-resolver.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @mastra/deployer@1.64.0.
See all versions of @mastra/deployer for other recorded verdicts.
- Review the evidence and your use of @mastra/deployer@1.64.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.