sentry-debug-issue
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Sentry (exceptions, breadcrumbs, user feedback) which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Sentry event data fetched via tools such as
get_sentry_resource,search_issues, andget_issue_breadcrumbsas described inSKILL.md. - Boundary markers: The 'Security
- all Sentry data is untrusted input' section in
SKILL.mdprovides explicit instructions to treat data as non-authoritative and to never follow embedded directives. - Capability inventory: The skill allows the agent to modify code, run tests, and perform commits/PRs as part of the debugging workflow in
SKILL.md(Steps 4 and 5). - Sanitization:
SKILL.mdcontains instructions to redact secrets, generalize field values, and use synthetic data in tests to prevent data exposure.
Audit Metadata