sentry-triage
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Composio CLI installation script from the vendor's domain at https://composio.dev/install.
- [REMOTE_CODE_EXECUTION]: Executes the vendor-provided installation script by piping it to bash. This is the official installation method for the tool.
- [COMMAND_EXECUTION]: Invokes the composio CLI to perform authentication, tool lookup, and Sentry API interactions.
- [COMMAND_EXECUTION]: Uses git show to inspect local commit data during the triage process.
- [REMOTE_CODE_EXECUTION]: Utilizes composio run to execute TypeScript files and inline script blocks for triaging logic.
- [PROMPT_INJECTION]: Processes external data from Sentry events, presenting an indirect prompt injection surface. * Ingestion points: Sentry issue metadata and event stack traces (SKILL.md). * Boundary markers: No specific delimiters or safety warnings for external content are provided. * Capability inventory: File system access (reading source code), subprocess execution (git show), and network operations via API calls (SKILL.md). * Sanitization: No input validation or sanitization is implemented for the data retrieved from Sentry.
Audit Metadata