sentry-cli
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the Sentry CLI installation script from the official domain at https://cli.sentry.dev/install.- [REMOTE_CODE_EXECUTION]: Executes the downloaded installation script via a shell pipe (curl | bash). This is the standard installation method for the official Sentry CLI.- [COMMAND_EXECUTION]: Provides instructions to execute the
sentrycommand-line tool for tasks such as authentication, organization discovery, and issue triaging. It also enables direct API access viasentry api.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from external sources like Sentry issue descriptions, events, and logs. - Ingestion points: Commands such as
sentry issue list,sentry event view, andsentry log list(SKILL.md, COMMAND_PATTERNS.md). - Boundary markers: The skill does not explicitly use delimiters for external content but provides a structured output contract for the agent to follow.
- Capability inventory: Execution of
sentryCLI commands and REST API access throughsentry api. - Sanitization: No specific sanitization or filtering of the ingested log or event content is mentioned.
Audit Metadata