mastra
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands to inspect local project files and run development utilities like the Mastra CLI.
- Evidence: Shell commands such as
ls node_modules/@mastra/,cat node_modules/@mastra/core/dist/docs/SOURCE_MAP.json, andnpm run devare used to verify local installation state and project configuration. - [EXTERNAL_DOWNLOADS]: The skill retrieves framework documentation and guides from official remote sources.
- Evidence: Fetches content from
https://mastra.ai/llms.txtand various subpages underhttps://mastra.ai/reference/to ensure current API usage. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process information from external documentation and local package files, which presents a theoretical injection surface.
- Ingestion points: Local
node_modulesdocumentation files and remotemastra.aidocumentation URLs. - Boundary markers: None explicitly defined in the fetch or read commands.
- Capability inventory: Shell command execution (cat, ls, grep, npm).
- Sanitization: No explicit sanitization or filtering of documentation content is described.
- [REMOTE_CODE_EXECUTION]: The skill recommends using
npxto execute official framework migration and setup tools. - Evidence: Mentions
npx @mastra/codemod@latest v1in the version migration guide.
Audit Metadata