migrate-breadcrumb-list
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
rg(ripgrep) for searching the codebase and.venv/bin/prekfor verifying the integrity of changes. These are standard developer tools and project-specific utilities intended for use within the Sentry development environment. - [INDIRECT_PROMPT_INJECTION]: The skill involves reading and refactoring existing source code files. This presents a data ingestion surface where the agent processes untrusted source code, which is an inherent risk for code-modification skills, though no malicious exploitation was observed.
- [SAFE]: All external references, such as GitHub pull request links, point to the vendor's official repository (getsentry/sentry). No patterns of obfuscation, credential harvesting, or unauthorized network activity were detected.
Audit Metadata