sentry-setup-releases
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands like
grep,cat, andlsto detect project frameworks and configurations. It also guides the user through using package managers likenpm,pip,brew,dotnet, andcomposerto install Sentry SDKs. All commands are relevant to the skill's primary purpose of Sentry integration.- [EXTERNAL_DOWNLOADS]: The skill references downloads from trusted sources, including official Sentry repositories, Sentry's CDN, and standard package registries. These are documented neutrally and are necessary for the skill's function.- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface by ingesting data from external sources. 1. Ingestion points: Sentry issue titles and event payloads enter the agent context viasearch_issuesandget_sentry_resourceinSKILL.md. 2. Boundary markers: Present; the skill contains explicit instructions to ignore instructions found within external payloads. 3. Capability inventory: Usesexecute_sentry_tool,find_releases, and various build-tool commands. 4. Sanitization: Present; the agent is explicitly warned not to execute instructions found in untrusted data.- [SAFE]: No malicious patterns, obfuscation, or persistence mechanisms were detected. The static analysis hint regarding concealment was evaluated as a false positive, as the instructions for removing test code and resolving test issues represent standard developer hygiene and cleanup processes.
Audit Metadata