sentry-release-management

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes sentry-cli, git, node, and curl to perform release management tasks. These operations are standard for development workflows and are restricted to interacting with the official Sentry API (sentry.io).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes project metadata and git state to automate the naming and tracking of Sentry releases.
  • Ingestion points: Project version from package.json (read via node) and commit SHAs from git rev-parse as described in SKILL.md.
  • Boundary markers: No explicit delimiters are used for the interpolated data.
  • Capability inventory: The skill executes sentry-cli commands via the Bash tool.
  • Sanitization: The instructions in references/best-practices.md promote the use of quoted variables (e.g., "$VERSION") to prevent shell injection from special characters in version strings.
  • [EXTERNAL_DOWNLOADS]: The instructions reference official Sentry packages such as @sentry/cli, @sentry/vite-plugin, and @sentry/node. These are well-known and established resources within the software development ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:47 AM