sentry-javascript-bugs
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external code diffs and files which are untrusted inputs. This creates a vulnerability surface where instructions hidden in code (e.g., in comments) could influence the agent's behavior.
- Ingestion points: Code changes from users, Warden findings, or git diffs as specified in
SKILL.md. - Boundary markers: The instructions do not define clear boundaries or include specific commands to ignore content within the analyzed files.
- Capability inventory: The agent is configured with access to file system and shell tools (
Read,Grep,Glob,Bash). - Sanitization: No sanitization or filtering is performed on the input code before it is processed by the agent.
Audit Metadata