sentry-cli
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official CLI installation script from the vendor's developer domain (cli.sentry.dev) and pipes it to bash. This is the standard, vendor-recommended installation method and is considered safe given the skill's origin.\n- [COMMAND_EXECUTION]: Instructs the agent on how to use the
sentrycommand-line tool for managing projects, issues, and organizations. The skill includes commands for initialization, release management, and dashboard configuration.\n- [DATA_EXFILTRATION]: Includes commands likesentry auth tokenwhich expose sensitive authentication credentials to the terminal output. While this reveals sensitive data, it is a legitimate administrative function of the CLI.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it retrieves and analyzes potentially untrusted external data (Sentry issues, logs, and traces) using AI-powered analysis tools likesentry issue explain.\n - Ingestion points: Data retrieved from Sentry APIs via commands like
sentry issue view,sentry log list, andsentry span list(documented in SKILL.md and references/issues.md).\n - Boundary markers: No explicit delimiters or instructions are provided to the agent to isolate or ignore embedded instructions within the fetched data.\n
- Capability inventory: The agent has access to powerful CLI operations, including
sentry apifor arbitrary network requests and destructive operations likesentry project delete.\n - Sanitization: There is no indication of sanitization or validation of external content before it is processed by the AI agent.
Audit Metadata