sentry-snapshots-cocoa
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses standard shell utilities (
find,grep,ls) and development tools (xcodebuild) to analyze project structure and execute build processes. - [EXTERNAL_DOWNLOADS]: Fetches official Sentry tools, including the Sentry CLI from the vendor's official domain and the Sentry wizard from the official NPM registry.
- [REMOTE_CODE_EXECUTION]: Executes the Sentry CLI installation script and the Sentry wizard tool as part of the setup and CI workflows.
- [PRIVILEGE_ESCALATION]: Includes templates for GitHub Actions that use
sudo xcode-selectto configure the build environment, which is standard practice for iOS CI runners to select the active Xcode version. - [INDIRECT_PROMPT_INJECTION]: The generated CI workflows utilize environment variables and paths derived from the repository, creating a standard surface for indirect prompt injection common in automated pipelines.
Audit Metadata