sentry-cli
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents installation procedures via a shell-piped command:
curl https://cli.sentry.dev/install -fsS | bash. This represents a remote code execution pattern, though it originates from the official domain of a well-known technology service. - [COMMAND_EXECUTION]: Primary functionality includes wrapping local processes for monitoring or debugging using
sentry local runandsentry monitor run. These commands facilitate the execution of user-provided shell scripts and binaries. - [DATA_EXFILTRATION]: The
sentry apicommand enables authenticated HTTP requests to Sentry's infrastructure, allowing for data retrieval, resource creation, and configuration updates within the scope of the provided credentials. - [PROMPT_INJECTION]: The skill processes external data from Sentry, including issue descriptions, logs, and AI-generated analysis. While this presents an attack surface for indirect prompt injection, it is a fundamental part of the skill's utility for investigating production errors.
Audit Metadata