document-api-endpoint
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to execute shell commands for development workflows, including
curlfor API inspection andmake,pnpm, andpytestfor validation and testing. - [EXTERNAL_DOWNLOADS]: The skill references documentation and API endpoints from Sentry's official domains (
develop.sentry.devandus.sentry.io). These are well-known, trusted services used for their intended purpose within the skill's scope. - [DATA_EXPOSURE]: The instructions include a
curlcommand template that utilizes a$TOKENenvironment variable for authentication. This is standard practice for API development tools and does not hardcode or exfiltrate sensitive credentials. - [INDIRECT_PROMPT_INJECTION]: The skill involves processing data from external API endpoints (Ingestion point: API response body). While it lacks explicit sanitization or boundary markers, the workflow is intended for manual developer review and documentation, posing minimal risk of automated injection attacks.
Audit Metadata