sentry-react-sdk

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is authored by 'getsentry' and exclusively promotes the use of official Sentry tools, libraries, and infrastructure.
  • [COMMAND_EXECUTION]: Standard utility commands are used for environment discovery to tailor setup advice.
  • Uses ls, cat, and grep to identify React versions, routers, and build tools in package.json and the local file system.
  • [EXTERNAL_DOWNLOADS]: Facilitates the installation of official SDK components from a trusted vendor.
  • Recommends npm install for packages like @sentry/react and @sentry/vite-plugin.
  • References the official Sentry wizard via npx @sentry/wizard@latest.
  • [DATA_EXFILTRATION]: Configuration for monitoring and tracing is documented with security and privacy in mind.
  • Provides explicit guidance on masking PII (e.g., maskAllText: true, blockAllMedia: true) in Session Replay configurations to prevent accidental exposure of sensitive user data.
  • Encourages the use of environment variables for sensitive DSN and authentication tokens, explicitly cautioning against committing these secrets to version control.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a local ingestion surface for project metadata, which is used safely for configuration logic.
  • Reads package.json and project structure to determine appropriate SDK integrations (e.g., React 19 vs older versions).
  • The logic is limited to recommending standard, vendor-approved SDK setups based on detected project dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:24 PM
Security Audit — agent-trust-hub — sentry-react-sdk