sentry-dotnet-sdk
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like
find,grep, andlsto detect project frameworks and configurations. This is restricted to non-sensitive project metadata. - [REMOTE_CODE_EXECUTION]: Setup instructions recommend
npx @sentry/wizard@latest, which is the official configuration tool for the service. This is a standard vendor-provided utility. - [INDIRECT_PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it reads project file structure and content to generate configuration advice.
- Ingestion points: Project configuration and source files (
.csproj,Program.cs, etc.) are read using shell tools inSKILL.md. - Boundary markers: None explicitly defined.
- Capability inventory: File system access and package installation (
dotnet add package). - Sanitization: Standard reconnaissance without specific input sanitization.
Audit Metadata