sentry-instrument-logging
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run project-specific verification tools (lint, test, type checks). This is standard development behavior for confirming that logging instrumentation does not break the build.
- [SAFE]: The instructions contain comprehensive security best practices. Specifically, the 'What not to log' section and the 'high-value log validation check' provide clear directives to exclude secrets, credentials, PII, and sensitive information from application logs.
- [PROMPT_INJECTION]: The skill processes untrusted data (project manifests and source code) to determine where to add logs, creating a potential surface for indirect prompt injection.
- Ingestion points: Project manifest files (e.g., package.json, go.mod) and application source code files.
- Boundary markers: Absent.
- Capability inventory: File system modification (adding logs to source files) and execution of local development tools.
- Sanitization: The skill mitigates risks by enforcing a mandatory validation step that specifically checks for safety and the exclusion of PII/secrets before any code changes are finalized.
Audit Metadata