error-tracking

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes explicit commands that fetch and print DSNs/tokens (e.g., a piped python one-liner that prints the project's "dsn") and shows examples with plaintext secrets, which requires the agent to read and potentially output secret values verbatim.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The setup instructions include a direct remote-install command that fetches and executes code at runtime (curl https://cli.sentry.dev/install -fsS | bash), which runs remote script content locally.