sentry-nextjs-sdk

Fail

Audited by Runlayer on Feb 27, 2026

Risk Level: HIGH
Scan Summary
Max Score
91%
Files
8
Flagged
8
Chunks
21
Flagged Files (8)
sentry-nextjs-sdk/references/profiling.mdHIGH
91.3%

Tool passed security scan

Malicious tool definition detected

sentry-nextjs-sdk/references/logging.mdHIGH
90.2%

Malicious tool definition detected

Description: in all three config files: ```typescript // instrumentation-client.ts import * as Sentry from "@sentry/nextjs"; Sentry.init({ dsn: process.env.NEXT_PUBLIC_SENTRY_DSN, enableLogs: true, integrations: [Sentry.consoleLoggingIntegration({ levels: ["warn", "error"] })], }); // sentry.server.config.ts import * as Sentry from "@sentry/nextjs"; Sentry.init({ dsn: process.env.SENTRY_DSN, enableLogs: true, integrations: [Sentry.pinoIntegration()], // or consoleLoggingIntegration }); // sentry

sentry-nextjs-sdk/references/tracing.mdMEDIUM
89.4%

Tool passed security scan

Malicious tool definition detected

Description: opt into true nesting (use with care — can produce incorrect data with concurrent async operations): ```typescript Sentry.init({ parentSpanIsAlwaysRootSpan: false, }); ``` --- ## Complete Config Example (All Three Runtimes) ```typescript // instrumentation-client.ts (Browser) import * as Sentry from "@sentry/nextjs"; Sentry.init({ dsn: process.env.NEXT_PUBLIC_SENTRY_DSN, environment: process.env.NODE_ENV, integrations: [ Sentry.browserTracingIntegration({ shouldCreateSpanForRequest:

sentry-nextjs-sdk/references/session-replay.mdMEDIUM
89.0%

Tool passed security scan

Malicious tool definition detected

```typescript Sentry.replayIntegration({ // Capture details for all same-origin requests networkDetailAllowUrls: [ window.location.origin, "api.example.com", /^https:\/\/api\.example\.com/, ], // Exclude PII-heavy endpoints networkDetailDenyUrls: ["/api/auth", /\/users\/\d+\/private/], networkCaptureBodies: true, networkRequestHeaders: ["Cache-Control", "X-Request-ID"], networkResponseHeaders: ["X-RateLimit-Remaining"], }); ``` **Limits:** - Bodies truncated to **150k characters** max. - Only te

sentry-nextjs-sdk/references/ai-monitoring.mdMEDIUM
88.4%

Malicious tool definition detected

Both default to `true` only when `sendDefaultPii: true` is set: ```typescript Sentry.init({ dsn: process.env.SENTRY_DSN, sendDefaultPii: true, // ← enables input/output recording by default tracesSampleRate: 1.0, }); ``` Or enable explicitly without `sendDefaultPii`: ```typescript integrations: [ Sentry.openAIIntegration({ recordInputs: true, // explicitly opt in recordOutputs: true, }), ], ``` > ⚠️ **PII warning:** Prompts often contain user-supplied text.

sentry-nextjs-sdk/SKILL.mdMEDIUM
85.6%

Malicious tool definition detected

--- ## Troubleshooting | Issue | Cause | Solution | |-------|-------|----------| | Events not appearing | DSN misconfigured or `debug: false` hiding errors | Set `debug: true` temporarily; check browser network tab for requests to `sentry.io` | | Stack traces show minified code | Source maps not uploading | Check `SENTRY_AUTH_TOKEN` is set; run `next build` and look for "Source Maps" in build output | | `onRequestError` not firing | SDK version < 8.28.0 | Upgrade: `npm install @sentry/nextjs@lat

sentry-nextjs-sdk/references/crons.mdMEDIUM
79.8%

Tool passed security scan

Malicious tool definition detected

sentry-nextjs-sdk/references/error-monitoring.mdMEDIUM
77.8%

Tool passed security scan

Malicious tool definition detected

}) Sentry.getGlobalScope().setTag(...) Sentry.getIsolationScope().setTag(...) // same as Sentry.setTag() // ── Fingerprinting ──────────────────────────────────────────────────── scope.setFingerprint(["group-key"]) event.fingerprint = ["{{ default }}", "extra-dimension"] // in beforeSend // ── Hooks ───────────────────────────────────────────────────────────── Sentry.init({ beforeSend(event, hint) { return event | null } }) Sentry.init({ beforeSendTransaction(event) { return event | null } }) Se

Audit Metadata
Max File Score
91%
Classification
UNKNOWN_SERVER
Files Scanned
8
Files Flagged
8
Chunks Analyzed
21
Analyzed
Feb 27, 2026, 07:32 PM
Security Audit — runlayer — sentry-nextjs-sdk