sentry-nextjs-sdk
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official Sentry packages such as
@sentry/nextjsand@sentry/profiling-nodevia npm. These are verified vendor resources. - [EXTERNAL_DOWNLOADS]: It suggests running the
@sentry/wizardvianpx, which is the standard, automated way to configure Sentry projects. - [COMMAND_EXECUTION]: The skill performs project detection using standard commands like
ls,grep, andcatto identify the Next.js router type, version, and existing configurations. These operations are restricted to local project metadata and do not execute untrusted code. - [CREDENTIALS_UNSAFE]: While the skill involves the use of Sentry DSNs and Auth Tokens, it correctly utilizes environment variables and placeholders (e.g.,
___DSN___,process.env.SENTRY_AUTH_TOKEN) rather than hardcoding actual secrets. It also provides explicit warnings against exposing sensitive keys in client-side code.
Audit Metadata