sentry-release-management
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
sentry-cli,git,node, andcurlto perform release management tasks. These operations are standard for development workflows and are restricted to interacting with the official Sentry API (sentry.io). - [INDIRECT_PROMPT_INJECTION]: The skill processes project metadata and git state to automate the naming and tracking of Sentry releases.
- Ingestion points: Project version from
package.json(read vianode) and commit SHAs fromgit rev-parseas described inSKILL.md. - Boundary markers: No explicit delimiters are used for the interpolated data.
- Capability inventory: The skill executes
sentry-clicommands via theBashtool. - Sanitization: The instructions in
references/best-practices.mdpromote the use of quoted variables (e.g.,"$VERSION") to prevent shell injection from special characters in version strings. - [EXTERNAL_DOWNLOADS]: The instructions reference official Sentry packages such as
@sentry/cli,@sentry/vite-plugin, and@sentry/node. These are well-known and established resources within the software development ecosystem.
Audit Metadata