sentry-nextjs-sdk
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by 'getsentry' and provides instructions for setting up the official Sentry Next.js SDK. All code snippets follow standard Next.js and Sentry integration patterns.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official, well-known packages from the vendor such as
@sentry/nextjs,@sentry/profiling-node, and using the@sentry/wizard. These are trusted resources used for their intended purpose of application monitoring. - [DATA_EXFILTRATION]: While the skill involves configuring DSNs and auth tokens, it uses placeholders (e.g.,
___DSN___) and correctly instructs users to use environment variables for sensitive secrets. It also includes extensive documentation on privacy masking and PII scrubbing for Session Replay and AI monitoring features. - [COMMAND_EXECUTION]: Phase 1 (Detect) uses standard shell commands like
cat,grep,ls, andfindto identify the project's configuration (e.g., Next.js version, router type). These commands are restricted to local file system inspection for project analysis and are considered benign in this context. - [REMOTE_CODE_EXECUTION]: The use of
npx @sentry/wizard@latestis a documented and standard procedure for setting up Sentry, originating from a trusted vendor.
Audit Metadata