sentry-cli
Fail
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts from https://cli.sentry.dev/install, which is an official domain for Sentry, a well-known technology service.
- [REMOTE_CODE_EXECUTION]: The skill documentation recommends an installation method that pipes a remote script to a shell: curl https://cli.sentry.dev/install -fsS | bash. This is the official and standard installation path for this tool provided by the vendor.
- [COMMAND_EXECUTION]: The skill enables the execution of the sentry CLI binary to manage projects and organizations. It includes safety instructions to confirm destructive actions with the user and to avoid logging sensitive authentication tokens.
- [PROMPT_INJECTION]: The skill interacts with untrusted external data (logs, issues) which presents an indirect prompt injection surface.
- Ingestion points: sentry log list, sentry issue view, and sentry event view as documented in references/log.md, references/issue.md, and references/event.md.
- Boundary markers: The instructions do not define delimiters or specific markers for tool output.
- Capability inventory: The skill can perform system-modifying and data-deleting actions via sentry project delete, sentry release create, and arbitrary API calls.
- Sanitization: There is no mention of sanitizing or escaping the data retrieved from Sentry before it is analyzed by the agent.
Recommendations
- HIGH: Downloads and executes remote code from: https://cli.sentry.dev/install - DO NOT USE without thorough review
Audit Metadata