port-span-names
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains technical instructions for modifying a software project. All operations, including code searches and build commands, are context-appropriate for a developer-oriented utility.
- [COMMAND_EXECUTION]: Instructions include the use of
grepfor codebase searching, andpnpmandnpx(for vitest and playwright) for building and verifying changes. These commands are standard for the targeted project environment. - [EXTERNAL_DOWNLOADS]: References official documentation for span conventions hosted on Sentry's GitHub Pages. These references are used for informational purposes and target the vendor's own verified infrastructure.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests a
<span-op>argument which is interpolated into shell search commands. While this creates a potential surface for command injection, the instructions are directed at a development context where such interactions are expected, and the skill includes specific rules to limit scope and prevent unintended modifications.
Audit Metadata