sentry-setup-releases
Warn
Audited by Snyk on Aug 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow reads diagnosis data from Sentry via an MCP “search_issues” followed by “get_sentry_resource/get_release_details,” and it explicitly treats MCP-returned tags/messages/frame paths as attacker-controllable free text from issues/events.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata