sentry-flutter-sdk
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several shell commands such as
grep,cat,ls, andfindto analyze the project's structure, dependencies, and environment. These are used for the primary purpose of identifying the project type and existing configurations. - [EXTERNAL_DOWNLOADS]: The skill recommends installing the Sentry Wizard via Homebrew (
brew install getsentry/tools/sentry-wizard) and adding official Sentry packages via the Flutter package manager (flutter pub add). These downloads target official and well-known repositories associated with the vendor. - [REMOTE_CODE_EXECUTION]: The installation and execution of the
sentry-wizardCLI is a form of remote tool execution. However, as it is an official tool from a recognized vendor and requires manual user initiation, it is considered a legitimate part of the developer workflow. - [INDIRECT_PROMPT_INJECTION]: The skill defines an ingestion surface where it reads project files (like
pubspec.yaml) to customize its recommendations. This is a standard functional requirement for a setup wizard and includes no signs of adversarial intent.
Audit Metadata