sentry
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
bashtool to executesentryCLI commands for data retrieval and configuration changes. - [INDIRECT_PROMPT_INJECTION]: The skill is instructed to read
TELEMETRY.mdfrom the root of a repository to obtain "query recipes" and "investigation pivots." - Ingestion points: Reads content from
TELEMETRY.mdin the current working directory. - Boundary markers: No specific delimiters or warnings are used when interpolating these recipes into queries.
- Capability inventory: Access to Sentry API (read/write), project and team creation/modification, and alert management.
- Sanitization: No explicit sanitization or validation of the file's content is performed before use.
- [DYNAMIC_EXECUTION]: The skill allows for the execution of a
sentrybinary if it is found in the current environment's PATH, which may include binaries provided by the repository being analyzed. - Evidence:
SKILL.mdnotes that a repository (e.g., a checkout ofgetsentry/sentry) can place its ownsentryprogram first on the PATH, which the agent will then use.
Audit Metadata