sentry-snapshots-cocoa
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing and using the official Sentry CLI via Homebrew (brew install getsentry/tools/sentry-cli) and fetching the Sentry SnapshotPreviews library from GitHub (https://github.com/getsentry/SnapshotPreviews). These are official vendor resources.
- [REMOTE_CODE_EXECUTION]: The setup process involves running the Sentry Wizard using npx (@sentry/wizard@latest), which downloads and executes the latest version of the configuration tool directly from the npm registry.
- [COMMAND_EXECUTION]: The skill utilizes several shell commands for project environment detection (find, grep) and build automation (xcodebuild). These are standard operations for Apple/Cocoa development workflows.
- [PRIVILEGE_ESCALATION]: Provided GitHub Actions templates include the use of sudo xcode-select to configure the active Xcode version on CI runners, which is a routine administrative task in automated build environments.
- [INDIRECT_PROMPT_INJECTION]: The skill performs automated discovery by searching project metadata and configuration files for specific library markers.
- Ingestion points: Scans local files like Package.swift and project.pbxproj using find and grep.
- Boundary markers: No explicit delimiter markers are employed when passing discovered paths to CLI tools.
- Capability inventory: Includes the ability to execute xcodebuild, install packages via brew, and run npx commands.
- Sanitization: Content from discovered project files is used to guide the routing logic without explicit sanitization steps.
Audit Metadata