sentry-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install well-known SDKs and CLI tools from official package registries (NPM and PyPI) and references official documentation from Sentry, a well-known service.
- [COMMAND_EXECUTION]: The skill uses standard shell commands to install dependencies, manage environment variables in
.envfiles, and verify the CLI installation. - [INDIRECT_PROMPT_INJECTION]: The skill sets up an error monitoring surface that ingests runtime application data.
- Ingestion points: Runtime error logs and manual event captures (
captureMessage) documented inSKILL.mdandreferences/implementation.md. - Boundary markers: None present in the provided verification code snippets.
- Capability inventory: Includes file system writes (
.env), shell command execution (package managers), and network egress to Sentry ingest endpoints. - Sanitization: The SDK configuration examples explicitly include
sendDefaultPii: falseto mitigate accidental leakage of sensitive user data. - [DYNAMIC_EXECUTION]: The Node.js configuration instructions utilize the
--importflag to load instrumentation logic (instrument.mjs) before the main application starts, which is a standard and expected mechanism for monitoring tools.
Audit Metadata