sentry-create-alert

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to perform REST API calls to Sentry's official endpoints (sentry.io) and python3 to parse the resulting JSON data. These are standard operations for an API integration skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses (members, teams, and integrations) to resolve human-readable names to IDs for configuration.
  • Ingestion points: Sentry API endpoints in SKILL.md (Phase 2).
  • Boundary markers: Data is parsed as JSON, restricting content to specific keys.
  • Capability inventory: curl for network requests and python3 for data processing.
  • Sanitization: Standard JSON parsing limits the execution of embedded instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 02:12 AM