sentry-snapshots-cocoa

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the Sentry CLI binary directly from the official Sentry domain (sentry.io) within GitHub Action templates.
  • [REMOTE_CODE_EXECUTION]: The skill uses npx to execute the @sentry/wizard package from the NPM registry to automate project configuration. It also employs a common pattern of piping a remote installation script from sentry.io to bash for CLI installation.
  • [COMMAND_EXECUTION]: The provided CI templates include sudo xcode-select commands, which are standard requirements for selecting the appropriate Xcode version on macOS GitHub Actions runners.
  • [DATA_EXPOSURE]: The skill includes shell commands to detect the presence of environment variables such as SENTRY_AUTH_TOKEN. These commands are designed to check for the existence of the token without printing or leaking its value, adhering to security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 11:11 PM
Security Audit — agent-trust-hub — sentry-snapshots-cocoa