sentry-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill fetches the current platform status from Sentry's official status API (status.sentry.io) and parses the JSON response using Python. While this involves piping remote data to an interpreter, it targets a well-known, official service endpoint for a legitimate diagnostic purpose.
- [COMMAND_EXECUTION]: Utilizes standard developer tools including npm, pip, curl, and sentry-cli to gather SDK version information and test network connectivity to Sentry ingest endpoints. These are appropriate tools for the skill's stated diagnostic function.
- [DYNAMIC_CONTEXT_INJECTION]: Employs dynamic context placeholders (!command) in the SKILL.md file to display the local versions of Node.js, Python, and Sentry CLI when the skill is accessed. These checks are limited to non-sensitive environment metadata.
- [DATA_EXPOSURE]: The skill accesses Sentry configuration details from environment variables (SENTRY_DSN, SENTRY_AUTH_TOKEN). The diagnostic report generation script includes specific redaction logic (using sed) to mask the secret portion of the DSN, ensuring sensitive credentials are not exposed in the final output bundle.
Audit Metadata