Back to Home
ssdeanx icon

AgentStack

by ssdeanx

Overview

AgentStack is a production-grade multi-agent framework built on Mastra, offering enterprise tools, specialized agents, workflows, and agent networks for scalable AI systems, with a focus on financial intelligence, RAG pipelines, observability, secure governance, and AI chat interfaces.

Installation

Run Command
npm run dev

Environment Variables

  • GITHUB_API_KEY
  • GITHUB_PERSONAL_ACCESS_TOKEN
  • ALPHA_VANTAGE_API_KEY
  • SERPAPI_API_KEY
  • POLYGON_API_KEY
  • FINNHUB_API_KEY
  • POSTGRES_URL
  • LANGFUSE_PUBLIC_KEY
  • LANGFUSE_SECRET_KEY
  • LANGFUSE_HOST
  • GOOGLE_API_KEY
  • SMITHERY_API_KEY
  • SMITHERY_PROFILE
  • NEO4J_PASSWORD
  • NEO4J_USERNAME
  • NEO4J_URI
  • NEO4J_DATABASE
  • KLAVIS_INSTANCE_ID
  • KLAVIS_STRATA

Security Notes

The `execaTool` directly exposes arbitrary command execution to agents, which is a critical security vulnerability allowing a compromised agent to run any shell command on the host machine. The `calendar-tool.ts` uses `execSync` to run `osascript`, a risky primitive if inputs are not strictly sanitized, though current usage appears to involve controlled inputs. `web-scraper-tool.ts` employs robust sanitization (JSDOM/Cheerio) for HTML content and path validation for file writes, which is positive for preventing XSS and path traversal. However, the core issue of arbitrary command execution significantly lowers the safety score.

Similar Servers

Stats

Interest Score34
Security Score3
Cost ClassHigh
Avg Tokens50000
Stars2
Forks0
Last Update2025-12-06

Tags

multi-agent systemsAI frameworkfinancial intelligenceRAG pipelinessecure governanceNext.jsTypeScript