sentry
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from Sentry error logs and events which represents a surface for indirect prompt injection where malicious content in logs could attempt to influence agent behavior. * Ingestion points: Sentry API responses fetched by scripts/sentry_api.py. * Boundary markers: Absent; the skill instructions do not specify the use of delimiters for the ingested data. * Capability inventory: Network access to sentry.io and access to the SENTRY_AUTH_TOKEN environment variable. * Sanitization: The script redacts emails and IP addresses using regular expressions to mitigate PII exposure.
- [COMMAND_EXECUTION]: The skill executes a bundled script scripts/sentry_api.py to interact with the Sentry API. The script is restricted to read-only operations and uses Python's standard argparse library to handle input safely.
Audit Metadata