fix-sentry
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from Sentry error reports and Logfire logs to diagnose issues and implement code fixes, which can serve as a vector for malicious instructions to influence agent behavior.
- Ingestion points: Sentry issue metadata including error messages and stack traces (SKILL.md Step 1) and Logfire log attributes (SKILL.md Step 2).
- Boundary markers: No specific delimiters or instructions to treat ingested data as untrusted are defined in the workflow.
- Capability inventory: The agent has shell access to create branches, modify the local file system, and open GitHub pull requests (SKILL.md Step 5).
- Sanitization: No sanitization or validation of the retrieved error messages or log content is performed before the data is used for analysis and code generation.
- [COMMAND_EXECUTION]: The skill executes local repository scripts and standard development CLI tools to manage the workspace and project lifecycle.
- Evidence: Execution of the './dev/create-worktree' script and usage of the 'git' and 'gh' command-line interfaces for repository management.
Audit Metadata