sentry-snapshots-cocoa
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Sentry CLI tool from the official sentry.io domain and utilizes npx to execute the latest @sentry/wizard utility.
- [COMMAND_EXECUTION]: Uses standard macOS and Xcode development tools including xcodebuild, simctl, find, and grep to perform project detection and execute snapshot rendering tasks.
- [COMMAND_EXECUTION]: Provides GitHub Action templates that include sudo xcode-select commands for configuring the build environment, which is a standard and necessary practice for Apple CI runners.
- [REMOTE_CODE_EXECUTION]: Implements a direct shell execution pattern (curl | bash) to install the Sentry CLI from the vendor's official website.
- [DATA_EXFILTRATION]: Transmits generated snapshot images and related metadata to Sentry's Snapshot service as part of the intended setup functionality.
- [CREDENTIALS_UNSAFE]: Includes logic to check for the presence of SENTRY_AUTH_TOKEN and other configuration variables while explicitly ensuring their values are never printed to logs or standard output.
Audit Metadata