sentry-snapshots-cocoa
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the sentry-cli binary and Sentry Wizard tool. These downloads originate from Sentry's official domain and the NPM registry, which are trusted sources for this vendor-authored skill.
- [REMOTE_CODE_EXECUTION]: The setup instructions include the use of curl | bash to install the Sentry CLI and npx to execute the Sentry Wizard. These are standard installation methods for the vendor's own tooling and are performed against the vendor's verified infrastructure.
- [PRIVILEGE_ESCALATION]: The provided GitHub Action templates include the use of sudo xcode-select. This is a routine administrative command in macOS CI environments used to ensure the correct Xcode version is active for the build process.
- [INDIRECT_PROMPT_INJECTION]: The skill implements automated project detection by scanning the local filesystem for Xcode and SwiftPM configurations.
- Ingestion points: File discovery logic in SKILL.md and references/wizard-setup.md that reads project paths and file contents.
- Boundary markers: No specific delimiters are used for shell command output interpolation.
- Capability inventory: Access to xcodebuild, sentry-cli, npx, and standard filesystem utilities.
- Sanitization: The skill uses xargs -0 with null-delimited find output, which is a security best practice for handling potentially malicious filenames.
- [COMMAND_EXECUTION]: The skill performs project analysis and builds using standard commands like xcodebuild, grep, and find. These operations are consistent with the skill's stated purpose of configuring build and test environments.
Audit Metadata