sentry-incident-runbook
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external Sentry reports, which could potentially influence the agent's behavior if the data contains malicious instructions.
- Ingestion points: Sentry API responses containing issue titles and event data are fetched via
curland processed inSKILL.md. - Boundary markers: No explicit delimiters are used to isolate the fetched data from the skill's instructions.
- Capability inventory: The skill utilizes
Bash,Write, andEdittools to perform incident management tasks. - Sanitization: The skill extracts specific JSON fields using
python3, providing a degree of structural integrity but lacking content-based filtering. - [COMMAND_EXECUTION]: Shell commands are employed for API interaction and data processing.
- Evidence:
SKILL.mdincludes variouscurlandpython3 -ccommand sequences for communicating with Sentry. - [EXTERNAL_DOWNLOADS]: Fetches incident and performance data from a well-known service.
- Evidence: The skill downloads information from Sentry's official API endpoints at
sentry.io.
Audit Metadata