sentry-nextjs-sdk
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx @sentry/wizardandnpm installto facilitate the setup of Sentry. These operations target official packages and tools from Sentry, which is a well-known service provider. The downloads are used for their intended purpose of SDK integration and do not involve untrusted third-party sources. - [COMMAND_EXECUTION]: The skill utilizes standard shell commands like
ls,cat,grep, andfindto perform local discovery of the project environment (e.g., detecting Next.js versions and project structure). These commands are used for analysis to provide tailored configuration advice and do not involve arbitrary or dangerous execution of external input. - [CREDENTIALS_UNSAFE]: The skill documentation describes the use of
SENTRY_AUTH_TOKENandSENTRY_DSN. It provides secure placeholders for these values and explicitly instructs the user to store secrets in environment files that are excluded from version control via.gitignore, following established security best practices.
Audit Metadata