sentry-create-alert
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
curlto communicate with the Sentry API located atsentry.io. - [DYNAMIC_EXECUTION]: The skill uses
python3 -cto execute inline Python snippets for parsing JSON responses from the API. These are generated from static templates and populated with data at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection and command injection due to the way it handles external data:
- Ingestion points: User-provided inputs including organization slugs, regions, authentication tokens, alert names, and email addresses are used in command construction (SKILL.md).
- Boundary markers: No explicit delimiters or instructions are used to prevent the agent from interpreting injected commands within these inputs.
- Capability inventory: The skill utilizes shell execution via
curland Python execution viapython3, providing a functional path for command exploitation (SKILL.md). - Sanitization: There is no evidence of input validation or escaping for the parameters interpolated into shell strings.
Audit Metadata