sentry-react-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by 'getsentry' and exclusively promotes the use of official Sentry tools, libraries, and infrastructure.
- [COMMAND_EXECUTION]: Standard utility commands are used for environment discovery to tailor setup advice.
- Uses
ls,cat, andgrepto identify React versions, routers, and build tools inpackage.jsonand the local file system. - [EXTERNAL_DOWNLOADS]: Facilitates the installation of official SDK components from a trusted vendor.
- Recommends
npm installfor packages like@sentry/reactand@sentry/vite-plugin. - References the official Sentry wizard via
npx @sentry/wizard@latest. - [DATA_EXFILTRATION]: Configuration for monitoring and tracing is documented with security and privacy in mind.
- Provides explicit guidance on masking PII (e.g.,
maskAllText: true,blockAllMedia: true) in Session Replay configurations to prevent accidental exposure of sensitive user data. - Encourages the use of environment variables for sensitive DSN and authentication tokens, explicitly cautioning against committing these secrets to version control.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a local ingestion surface for project metadata, which is used safely for configuration logic.
- Reads
package.jsonand project structure to determine appropriate SDK integrations (e.g., React 19 vs older versions). - The logic is limited to recommending standard, vendor-approved SDK setups based on detected project dependencies.
Audit Metadata