mastra-api
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several shell scripts located in the scripts/ directory to perform administrative and debugging tasks. These scripts leverage standard utilities such as curl for network requests, jq for JSON processing, and python3 for data formatting and URL encoding. All commands are used within their intended functional scope for local development.\n- [EXTERNAL_DOWNLOADS]: The skill performs HTTP GET requests to interact with the Mastra API. These requests are restricted to localhost (port 4111), which is a whitelisted and trusted environment for local development tools. No connections to external or untrusted remote servers were detected.\n- [DATA_EXFILTRATION]: Although the skill accesses conversation threads and system logs, all data retrieval is performed against the local Mastra instance. There is no logic present that transmits this information to external third-party domains or non-whitelisted locations.
Audit Metadata