sentry-sdk-upgrade
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill ingests untrusted project files and configuration data to detect SDK usage, representing an indirect prompt injection surface. * Ingestion points: Reads
package.jsonand source files (.ts,.js, etc.) usingcat,grep, andfindcommands. * Boundary markers: No explicit delimiters or instructions are provided to the agent to treat file content as untrusted. * Capability inventory: The skill utilizes shell execution for package management and project builds, along with file read/write operations. * Sanitization: No sanitization is performed on external content before it is processed by the agent. - [REMOTE_CODE_EXECUTION]: The skill uses
npx @sentry/wizard, which involves downloading and executing a remote tool. This utility is provided by the official vendor (getsentry) and is a standard part of the Sentry migration workflow. - [COMMAND_EXECUTION]: Executes shell commands including
npm install,yarn add,pnpm update,npx tsc, andnpm run build. These operations are required for the skill's primary purpose of updating dependencies and verifying build integrity. - [EXTERNAL_DOWNLOADS]: References official migration guides and documentation at
docs.sentry.ioand the source repository atgithub.com/getsentry. These are trusted resources belonging to the skill author.
Audit Metadata