sentry-cli-fix-issues
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/collect_issue_context.pyusessubprocess.runto execute thesentryCLI. The script passes arguments as a list and does not useshell=True, which follows security best practices to prevent command injection. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process production telemetry (logs, event payloads) that may contain instructions from untrusted sources (e.g., error messages triggered by users).
- Ingestion points: Data is ingested through
sentryCLI commands such asissue view,issue events, andtrace logs, which are then processed by the agent or the collection script. - Boundary markers: The file
references/privacy-security.mdprovides explicit instructions for the agent to treat Sentry data as untrusted evidence and to ignore any instructions embedded within event text. - Capability inventory: The skill has the capability to execute the
sentryCLI viasubprocess.runand provides instructions for patching the local repository. - Sanitization: The
scripts/collect_issue_context.pyscript implements a redaction function using regular expressions to filter out sensitive patterns such as authorization headers, cookies, tokens, emails, and DSNs before the data is presented to the agent.
Audit Metadata