sentry-setup-releases

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard shell commands like grep, cat, and ls to detect project frameworks and configurations. It also guides the user through using package managers like npm, pip, brew, dotnet, and composer to install Sentry SDKs. All commands are relevant to the skill's primary purpose of Sentry integration.- [EXTERNAL_DOWNLOADS]: The skill references downloads from trusted sources, including official Sentry repositories, Sentry's CDN, and standard package registries. These are documented neutrally and are necessary for the skill's function.- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface by ingesting data from external sources. 1. Ingestion points: Sentry issue titles and event payloads enter the agent context via search_issues and get_sentry_resource in SKILL.md. 2. Boundary markers: Present; the skill contains explicit instructions to ignore instructions found within external payloads. 3. Capability inventory: Uses execute_sentry_tool, find_releases, and various build-tool commands. 4. Sanitization: Present; the agent is explicitly warned not to execute instructions found in untrusted data.- [SAFE]: No malicious patterns, obfuscation, or persistence mechanisms were detected. The static analysis hint regarding concealment was evaluated as a false positive, as the instructions for removing test code and resolving test issues represent standard developer hygiene and cleanup processes.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 10:55 AM
Security Audit — agent-trust-hub — sentry-setup-releases