sentry-ios-swift-setup
Warn
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [External Downloads] (MEDIUM): The skill directs the installation of the sentry-cocoa SDK from a non-whitelisted GitHub repository (getsentry/sentry-cocoa) and the fastlane-plugin-sentry Ruby gem.- [Data Exposure & Exfiltration] (LOW): The skill configures attachScreenshot and attachViewHierarchy to true, which captures potentially sensitive UI data and transmits it to Sentry. It also provides instructions for handling SENTRY_AUTH_TOKEN in shell environments.- [Indirect Prompt Injection] (LOW): The skill processes untrusted user requests to automate setup. Ingestion points: User prompts ('add Sentry to iOS') in SKILL.md. Boundary markers: Absent. Capability inventory: Shell execution (pod install, fastlane) and Network access (Sentry SDK) across Swift and Ruby files. Sanitization: Absent.- [Command Execution] (LOW): The skill instructs the execution of shell commands like pod install and bundle exec fastlane, which are standard for the toolchain but involve running code from external sources.
Audit Metadata