migrate-frontend-forms
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a developer migration guide for Sentry's internal frontend infrastructure. It defines mappings between legacy components (JsonForm) and new components (@sentry/scraps). All code examples follow standard React and TypeScript patterns and reference internal Sentry utility libraries.
- [COMMAND_EXECUTION]: The skill instructs the agent to run
pnpm run extract-form-fieldsto update the settings search registry. This is a documented and standard development workflow within the Sentry repository to synchronize metadata for the search indexer and does not represent a security risk. - [DATA_EXPOSURE]: API interaction examples use standard relative paths (e.g.,
/projects/${organization.slug}/${project.slug}/) and do not contain hardcoded credentials or access sensitive system files. All data transformations (equivalent togetData) are handled within the application logic as expected for form submission. - [INDIRECT_PROMPT_INJECTION]: While the skill processes data from API error responses to display field errors, it does so using structured logic (
requestErrorToFieldErrors) and recommends schema validation with Zod, which are best practices for sanitizing and validating external data inputs.
Audit Metadata