sentry-react-router-framework-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official Sentry SDK packages and using the
@sentry/wizardfor automated setup, targeting trusted vendor resources from Sentry. - [CREDENTIALS_UNSAFE]: Securely manages authentication tokens by recommending the use of environment variables (
SENTRY_AUTH_TOKEN) and uses descriptive placeholders (e.g.,___PUBLIC_DSN___,___ORG_SLUG___) for other identifiers. - [COMMAND_EXECUTION]: Uses standard shell commands like
grep,ls, andcatin SKILL.md to inspect project metadata and file availability for determining the correct configuration path. - [INDIRECT_PROMPT_INJECTION]: The skill ingests local project configuration data to adapt its recommendations.
- Ingestion points: Reads
package.json,entry.client.tsx,entry.server.tsx,instrument.server.mjs,react-router.config.ts, andvite.config.tsas specified in Phase 1 of SKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used during the data ingestion phase.
- Capability inventory: Limited to benign project discovery commands and generation of static configuration code snippets throughout SKILL.md and referenced files.
- Sanitization: Relies on the developer's manual review of the generated code before integration into the project.
Audit Metadata