sentry-automation
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The capability set is mostly aligned with Sentry automation, and the MCP endpoint appears to be the vendor's official hosted service. However, the skill materially misstates authentication ('no API keys needed') and routes all data/actions through a Composio/Rube intermediary that may manage stored OAuth credentials. This is not confirmed malware, but it has meaningful trust and data-flow risk that should be treated as medium risk rather than benign.
Confidence: 84%Severity: 58%
Audit Metadata