sentry-ruby-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands for project discovery and verification.
- The
Phase 1: Detectsection inSKILL.mdusesgrepto scanGemfileand other source files for framework markers, background job processors, and competitor monitoring tools. - The verification section suggests running
npx @spotlightjs/spotlightto launch a local development sidecar. - These commands are standard for project analysis and developer workflows.
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install external dependencies.
- Recommends installation of official Sentry gems (e.g.,
sentry-ruby,sentry-rails,sentry-sidekiq) viabundle install. - Recommends the usage of
@spotlightjs/spotlightvianpxfor local event inspection. - These resources are official packages from the vendor and are standard for the SDK's functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection via project metadata files.
- Ingestion points: The skill reads content from
Gemfile,package.json, and source code files inapp/,lib/, andconfig/usinggrepandcatinSKILL.md. - Boundary markers: None present; the skill treats the output of these discovery commands as reliable indicators for routing logic.
- Capability inventory: The skill can suggest command executions (installation) and configuration changes based on the data found.
- Sanitization: None; it performs simple string matching to detect project state.
Audit Metadata