sentry-otel-exporter-setup
Warn
Audited by Snyk on Aug 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill explicitly fetches and uses remote content at runtime — including the release API and downloadable tarball (https://api.github.com/repos/open-telemetry/opentelemetry-collector-releases/releases/latest and https://github.com/open-telemetry/opentelemetry-collector-releases/releases/download/v<numeric_version>/otelcol-contrib_<numeric_version>.tar.gz) and also pulls example configs from raw.githubusercontent.com which are used as templates (https://raw.githubusercontent.com/open-telemetry/opentelemetry-collector-contrib/main/exporter/sentryexporter/docs/example-config.yaml), so remote content would be retrieved and used to control installation/configuration at runtime.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata