sentry-nextjs-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official Sentry packages such as
@sentry/nextjs,@sentry/wizard, and@sentry/profiling-node. These are established packages from a well-known service provider. - [COMMAND_EXECUTION]: The detection phase utilizes standard shell commands (
cat,ls,grep,find) to identify project structure and dependencies. These operations are limited to project discovery and do not involve privilege escalation or dangerous execution patterns. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by instructing users to manage sensitive credentials like
SENTRY_DSNandSENTRY_AUTH_TOKENvia environment variables or gitignored configuration files rather than hardcoding them. - [DATA_EXFILTRATION]: While the skill configures error and event reporting to Sentry's infrastructure, this is the primary intended purpose of the SDK. The documentation includes clear instructions on privacy masking (Category: Session Replay) and PII protection (Category: AI Monitoring) to ensure sensitive data is not inadvertently sent.
Audit Metadata