sentry-fix
Warn
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8). It processes untrusted data from external Sentry error reports and stacktraces, using this content to generate code fixes and git commits. * Ingestion points: Sentry MCP issue retrieval (getIssues, get_issue) and local source file reads based on stacktrace data (SKILL.md). * Boundary markers: Absent; there are no instructions to the agent to treat external error data as untrusted or to use delimiters. * Capability inventory: High; includes file writes, git branch/commit/merge operations, and Sentry resolution actions across multiple steps. * Sanitization: Absent; error messages and stacktraces are processed directly without validation.
- [COMMAND_EXECUTION]: The skill manages a persistent background task using launchctl. It provides commands to monitor and control a service (com.claude.sentry-fix) driven by a shell script (sentry-fix-poller.sh) for autonomous error resolution. While this serves the skill's primary purpose of automated fixing, it establishes a persistence mechanism on the host system.
Audit Metadata