sentry-triage-to-pr
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a strong privacy-first architecture.
- The
sentry_triage_operator.pyscript uses recursive redaction to strip sensitive data from Sentry payloads. - Redaction patterns cover emails, IP addresses, UUIDs, bearer tokens, and common sensitive JSON keys (e.g., authorization, cookie, secret).
- [COMMAND_EXECUTION]: Interaction with system tools is handled through restricted interfaces.
- The skill invokes the Sentry, GitHub, and Git CLIs using
subprocess.runwith list-based arguments. - This approach eliminates shell injection vulnerabilities and restricts operations to the intended binaries.
- [PROMPT_INJECTION]: The skill incorporates safeguards against indirect prompt injection from external data sources.
- Instructions explicitly mandate treating Sentry payloads as sensitive and untrusted.
- The operator script sanitizes issue titles and culprits into redacted slugs before they are used in generated plans or PR bodies.
Audit Metadata