sentry-svelte-sdk
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends using official Sentry installation methods, specifically
npx @sentry/wizard@latestandnpm install @sentry/sveltekit. Sentry is a well-known and established monitoring service. - [COMMAND_EXECUTION]: Phase 1 of the skill uses standard shell utilities such as
cat,grep, andlsto inspect local project files likepackage.jsonandsvelte.config.js. These commands are used solely for environment detection and do not execute arbitrary or dangerous code. - [DATA_EXFILTRATION]: Automated scanners flagged
https://analytics.third-party.comas malicious. However, inreferences/session-replay.md, this URL is used exclusively as a placeholder within anetworkDetailDenyUrlsconfiguration. This is a security-positive example demonstrating how developers can prevent the SDK from sending sensitive session data to untrusted third-party domains.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata