sentry-fix-issues
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingest data from Sentry (exception messages, breadcrumbs, request bodies) which are attacker-controllable and may contain malicious directives.
- Ingestion points: Untrusted data enters the context through tools like
get_issue_details,search_issue_events, andget_event_attachmentas described in Phase 2. - Boundary markers: The skill includes a 'Security Constraints' section that explicitly warns the agent to treat Sentry data as untrusted and never follow embedded directives.
- Capability inventory: The agent has significant capabilities including reading local source code, inspecting git history, and writing code to implement fixes (Phase 5).
- Sanitization: The skill mandates redacting PII and secrets and requires using synthetic data for test reproduction, reducing exposure but not eliminating the input processing risk.
Audit Metadata