sentry-create-alert
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell command templates (curl) in Phases 2 and 4 that interpolate user-provided variables such as organization slugs, regions, and authentication tokens. This creates a potential surface for command injection if the executing agent does not properly escape these values before shell execution.
- [DYNAMIC_EXECUTION]: The skill generates and executes inline Python scripts (python3 -c) to process JSON data from API responses. These are simple scripts generated from static templates provided within the skill instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external Sentry API endpoints, creating a vulnerability surface for indirect injection if the API data is attacker-controlled.
- Ingestion points: API responses from Sentry member, team, and integration endpoints (SKILL.md).
- Boundary markers: None.
- Capability inventory: Shell command execution (curl) and script execution (python3).
- Sanitization: No explicit validation or filtering of the API response data is performed prior to processing.
Audit Metadata