sentry-common-errors
Fail
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill scans local project files to identify Sentry initialization code, creating a surface for indirect prompt injection from codebase content.
- Ingestion points:
grepcommand inSKILL.mdextracts code snippets from.ts,.js,.mjs, and.pyfiles. - Boundary markers: No explicit delimiters or instructions are used to separate scanned code from the agent's primary instructions.
- Capability inventory: The skill has access to tools including
npm,node,curl,npx,sentry-cli, andpython3via shell execution. - Sanitization: No escaping or validation is performed on the extracted file content before it is processed by the agent.
- [REMOTE_CODE_EXECUTION]: The skill fetches health data from Sentry's official status API and processes the response using a piped Python script for diagnostic purposes.
- [DYNAMIC_CONTEXT_INJECTION]: Benign environment discovery commands are executed at skill load time using the
!syntax to detect the presence of Node.js and Python SDKs as well as the Sentry CLI. - [DYNAMIC_EXECUTION]: The skill uses
node -eandpython3 -cto execute small diagnostic script templates for validating environment configuration and event delivery.
Recommendations
- HIGH: Downloads and executes remote code from: https://status.sentry.io/api/v2/status.json - DO NOT USE without thorough review
Audit Metadata