sentry-python-sdk

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs automated detection of project frameworks and libraries by scanning local configuration files such as requirements.txt, pyproject.toml, and package.json. This is a legitimate diagnostic activity intended to provide tailored integration recommendations.
  • [SAFE]: All recommended external dependencies and URLs refer to Sentry, which is a well-known and established error monitoring service. The skill directs users to official documentation and package registries.
  • [SAFE]: Security best practices are followed for credential management, advising the use of environment variables (e.g., SENTRY_DSN) for sensitive data instead of hardcoding values.
  • [SAFE]: Indirect prompt injection surface: The skill ingests data from untrusted local files (e.g., requirements.txt) to identify frameworks. While no explicit boundary markers or sanitization steps are defined for this process, the agent's capabilities are limited to providing configuration guidance and recommending standard package installations, posing no significant security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 08:22 AM