sentry-create-alert

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to perform network operations against Sentry's official API endpoints and pipes the output into shell commands.
  • [DYNAMIC_EXECUTION]: Uses python3 -c to execute inline Python scripts that parse JSON data from the API at runtime. The script content is dynamically constructed by interpolating variables like USER_EMAIL into the command string.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources (Sentry API responses for members, teams, and integrations). This presents an indirect prompt injection surface if the external data or user-supplied placeholders like USER_EMAIL or {payload} contain characters that could alter the logic of the shell or Python commands.
  • Ingestion points: API responses from https://{region}.sentry.io/api/0/organizations/ endpoints (members, teams, integrations, workflows).
  • Boundary markers: None; the data is processed directly by piped commands.
  • Capability inventory: Execution of shell commands via curl and python3 via subprocess/shell.
  • Sanitization: No explicit sanitization or escaping is implemented for the interpolated user values or API data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:34 PM
Security Audit — agent-trust-hub — sentry-create-alert