sentry-debug-issue
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from Sentry (exceptions, logs, breadcrumbs) which serves as an ingestion point for potential indirect prompt injection. The skill includes a mandatory 'Security' section that explicitly instructs the agent to ignore embedded directives in data, use synthetic data for tests, and verify event frames against the local codebase. This represents a robust defense against Category 8 attacks.
- [COMMAND_EXECUTION]: The skill involves code modification and Git operations to apply and ship fixes. These operations are essential to the skill's primary purpose and are gated by instructions to verify external data against the repository before acting.
- [DATA_EXFILTRATION]: Interaction with external Sentry data is handled through authenticated vendor-owned MCP tools. The instructions explicitly forbid the reproduction of secrets or PII into code or tests.
- [SAFE]: No obfuscation, unauthorized privilege escalation, or persistence mechanisms were detected. The skill is authored by the vendor and follows best practices for tool use and data handling.
Audit Metadata