sentry-tanstack-start-sdk
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands (
cat,grep,ls) during the 'Phase 1: Detect' step to identify project structure and existing configurations. This is a common and safe pattern for project-aware setup assistants. - [EXTERNAL_DOWNLOADS]: The skill recommends installing the
@sentry/tanstackstart-reactpackage via NPM. This is a legitimate SDK package from the skill's author (getsentry). - [DATA_EXFILTRATION]: The skill checks for the presence of
SENTRY_AUTH_TOKENin.envfiles. This is used solely to verify if the project is ready for source map uploads, which is a standard part of the Sentry integration workflow. No data is sent to external servers by the skill itself. - [DATA_INGESTION]: The skill analyzes project files such as
package.json,vite.config.ts, and backend dependency files (e.g.,go.mod,requirements.txt) to determine the appropriate integration steps. This is a routine operation for a configuration wizard and does not pose a security risk in this context.
Audit Metadata