sentry-create-alert
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform REST API calls to Sentry's official endpoints (sentry.io) andpython3to parse the resulting JSON data. These are standard operations for an API integration skill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses (members, teams, and integrations) to resolve human-readable names to IDs for configuration.
- Ingestion points: Sentry API endpoints in
SKILL.md(Phase 2). - Boundary markers: Data is parsed as JSON, restricting content to specific keys.
- Capability inventory:
curlfor network requests andpython3for data processing. - Sanitization: Standard JSON parsing limits the execution of embedded instructions.
Audit Metadata