sentry-setup-releases
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The instructions explicitly warn the agent to treat all data returned from the MCP (such as issue titles and tags) as untrusted and to never execute instructions found within event payloads.\n- [CREDENTIALS_UNSAFE]: The skill advocates for secure handling of Sentry authentication tokens, recommending the use of CI secret stores and gitignored environment files while strictly forbidding the committal of tokens to version control.\n- [EXTERNAL_DOWNLOADS]: All referenced external tools and dependencies, such as the Sentry Wizard and various bundler plugins, are official packages provided by the authoring vendor.\n- [COMMAND_EXECUTION]: The shell commands and build scripts provided in the references are standard developer utilities for build systems (Vite, Webpack, Xcode, Gradle) and the Sentry CLI.
Audit Metadata