sentry-sdk-upgrade

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill ingests untrusted project files and configuration data to detect SDK usage, representing an indirect prompt injection surface. * Ingestion points: Reads package.json and source files (.ts, .js, etc.) using cat, grep, and find commands. * Boundary markers: No explicit delimiters or instructions are provided to the agent to treat file content as untrusted. * Capability inventory: The skill utilizes shell execution for package management and project builds, along with file read/write operations. * Sanitization: No sanitization is performed on external content before it is processed by the agent.
  • [REMOTE_CODE_EXECUTION]: The skill uses npx @sentry/wizard, which involves downloading and executing a remote tool. This utility is provided by the official vendor (getsentry) and is a standard part of the Sentry migration workflow.
  • [COMMAND_EXECUTION]: Executes shell commands including npm install, yarn add, pnpm update, npx tsc, and npm run build. These operations are required for the skill's primary purpose of updating dependencies and verifying build integrity.
  • [EXTERNAL_DOWNLOADS]: References official migration guides and documentation at docs.sentry.io and the source repository at github.com/getsentry. These are trusted resources belonging to the skill author.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 08:10 PM
Security Audit — agent-trust-hub — sentry-sdk-upgrade