sentry-automation
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the configuration of a remote MCP server.
- Evidence: Users are instructed to add
https://rube.app/mcpas an MCP server endpoint in their client configuration. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it ingests and acts upon data from external Sentry error logs and events.
- Ingestion points: Data is retrieved from Sentry issues and events via tools like
SENTRY_LIST_AN_ISSUES_EVENTSandSENTRY_RETRIEVE_AN_ISSUE_EVENTas described in SKILL.md. - Boundary markers: The instructions lack explicit delimiters or guardrails to prevent the agent from following instructions embedded within the Sentry log data.
- Capability inventory: The skill provides broad capabilities, including creating alert rules (
SENTRY_CREATE_PROJECT_RULE_FOR_ALERTS), managing releases (SENTRY_CREATE_RELEASE_FOR_ORGANIZATION), and updating cron monitors (SENTRY_UPDATE_A_MONITOR). - Sanitization: There is no indication that ingested log content is sanitized or validated before being processed by the agent.
Audit Metadata