@superagent-ai/mastra

Superagent security processors for Mastra AI agents. Protect your AI applications with threat detection (Guard) and PII redaction (Redact).

Installation

npm install @superagent-ai/mastra

Features

• Guard Processor - Detect and block prompt injection, system prompt extraction, and data exfiltration attempts
• Redact Processor - Automatically remove PII/PHI from user inputs before processing
• TypeScript - Full type safety with exported types
• Zero dependencies - Uses native fetch, only requires @mastra/core as a peer dependency

Usage

import { Agent } from "@mastra/core/agent";
import {
  SuperagentGuardInputProcessor,
  SuperagentRedactInputProcessor,
} from "@superagent-ai/mastra";

const agent = new Agent({
  name: "secure-agent",
  instructions: "You are a helpful assistant.",
  model: "anthropic/claude-3-5-haiku-20241022",

  inputProcessors: [
    // Block malicious inputs (prompt injection, etc.)
    new SuperagentGuardInputProcessor({
      apiKey: process.env.SUPERAGENT_API_KEY!,
    }),
    // Strip PII from user inputs before processing
    new SuperagentRedactInputProcessor({
      apiKey: process.env.SUPERAGENT_API_KEY!,
    }),
  ],
});

Processors

SuperagentGuardInputProcessor

Analyzes user inputs for security threats before they reach your agent.

new SuperagentGuardInputProcessor({
  apiKey: "your-api-key",
  baseUrl: "https://app.superagent.sh", // optional
  systemPrompt: "Custom instructions for classification", // optional
});

Detects:

• Prompt injection attempts
• System prompt extraction attacks
• Data exfiltration attempts

SuperagentRedactInputProcessor

Removes sensitive information from user inputs before the agent processes them.

new SuperagentRedactInputProcessor({
  apiKey: "your-api-key",
  entities: ["EMAIL", "SSN", "PHONE"], // optional - custom entity types
});

Configuration

All processors accept a configuration object with the following options:

| Option | Type | Required | Description | |--------|------|----------|-------------| | apiKey | string | Yes | Your Superagent API key | | baseUrl | string | No | Custom API base URL (default: https://app.superagent.sh) |

Guard processor also accepts:

| Option | Type | Required | Description | |--------|------|----------|-------------| | systemPrompt | string | No | Custom instructions to steer classification behavior |

Redact processor also accepts:

| Option | Type | Required | Description | |--------|------|----------|-------------| | entities | string[] | No | Custom entity types to redact (defaults to standard PII) |

API Reference

For more information about the underlying APIs:

• Guard API Documentation
• Redact API Documentation

License

MIT