sentry-go-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard diagnostic shell commands (
grep,ls,cat) to detect project dependencies, web frameworks (Gin, Echo, Fiber), and logging libraries (Logrus, Zap, Zerolog) inPhase 1. These are read-only diagnostic operations used to provide tailored configuration recommendations. - [EXTERNAL_DOWNLOADS]: Recommends the installation of official Sentry Go SDK packages (e.g.,
github.com/getsentry/sentry-go) using the standardgo getpackage manager. These downloads target the official repositories of the skill author (getsentry) and are considered safe. - [CREDENTIALS_UNSAFE]: Correctly instructs the user to manage sensitive data, such as the Sentry DSN, using environment variables via
os.Getenv("SENTRY_DSN")in the provided Go configuration snippets. No hardcoded secrets or sensitive paths were found. - [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface through reading project files (
go.mod,go.sum) and directory structures to determine the application's environment. While it lacks explicit boundary markers, its capabilities are restricted to diagnostic discovery and recommending standard package installations. The risk is negligible as it serves the primary purpose of SDK configuration.
Audit Metadata