sentry-nestjs-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Phase 1 uses standard shell commands such as
grep,ls, andnodeto perform project discovery. These commands are used to identify the NestJS version, existing Sentry configurations, and detected technologies like Fastify, GraphQL, or AI libraries to tailor recommendations. - [EXTERNAL_DOWNLOADS]: The skill provides instructions to install official Sentry and NestJS packages via standard package managers. The referenced packages, such as
@sentry/nestjsand@sentry/profiling-node, are legitimate vendor resources provided by getsentry. - [DYNAMIC_EXECUTION]: A Node.js one-liner is used in the detection phase to programmatically extract the version of the
@nestjs/corepackage from the localnode_modules. This is a benign use of dynamic execution for environment validation. - [DATA_EXPOSURE]: The skill documentation includes guidance on managing PII (Personally Identifiable Information) by configuring the
dataCollectionoptions in the SDK. It specifically explains how to disable the capture of user data and GenAI inputs/outputs, demonstrating a security-conscious approach to monitoring.
Audit Metadata