sentry-snapshots-cocoa
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The GitHub Actions templates and setup instructions facilitate the installation of Sentry's official CLI tools. It fetches the installer from 'sentry.io' and uses 'npx' to run '@sentry/wizard', which are official resources provided by the vendor for project configuration.
- [COMMAND_EXECUTION]: The skill performs project discovery using standard system utilities like 'find', 'grep', and 'ls' to identify Xcode projects, Swift packages, and existing test configurations. These operations are scoped to project files and do not involve executing arbitrary user-provided code.
- [REMOTE_CODE_EXECUTION]: The provided CI workflow templates include a step to install 'sentry-cli' via a shell script from 'sentry.io'. As 'sentry.io' is the official domain of a well-known service provider, this remote execution pattern is considered a standard installation method for the vendor's tooling.
- [DATA_EXPOSURE]: The skill includes logic to verify the presence of required environment variables such as 'SENTRY_AUTH_TOKEN'. The detection script is safely implemented to only report whether the variable is 'set' or 'unset' without ever printing or exposing the actual secret values.
Audit Metadata