sentry-create-alert
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform authorized REST API operations (GET, POST, PUT, DELETE) against Sentry's infrastructure to manage alerts. - [EXTERNAL_DOWNLOADS]: The skill retrieves organization configuration data, such as member lists, team IDs, and integration details, from
sentry.io. These operations target official vendor domains and are documented as standard API interactions. - [DYNAMIC_EXECUTION]: Minimal Python snippets are used via
python3 -cto parse and filter JSON responses from API calls. This is a standard and safe method for handling structured data in shell-based workflows. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the Sentry API to resolve identifiers for alert configuration. While this represents a data ingestion surface, the risk is negligible as it interacts only with official vendor services using the user's own credentials. 1. Ingestion points: Sentry API members, teams, and integrations endpoints (SKILL.md). 2. Boundary markers: None. 3. Capability inventory: curl-based Sentry API write/delete access. 4. Sanitization: None.
Audit Metadata