sentry-create-alert
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform network operations against Sentry's official API endpoints and pipes the output into shell commands. - [DYNAMIC_EXECUTION]: Uses
python3 -cto execute inline Python scripts that parse JSON data from the API at runtime. The script content is dynamically constructed by interpolating variables likeUSER_EMAILinto the command string. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources (Sentry API responses for members, teams, and integrations). This presents an indirect prompt injection surface if the external data or user-supplied placeholders like
USER_EMAILor{payload}contain characters that could alter the logic of the shell or Python commands. - Ingestion points: API responses from
https://{region}.sentry.io/api/0/organizations/endpoints (members, teams, integrations, workflows). - Boundary markers: None; the data is processed directly by piped commands.
- Capability inventory: Execution of shell commands via
curlandpython3via subprocess/shell. - Sanitization: No explicit sanitization or escaping is implemented for the interpolated user values or API data.
Audit Metadata