sentry-security

Malicious tool definition detected

Tool: README.md Description: # sentry-security Sentry-specific security review skill synthesized from real vulnerability history.

Malicious tool definition detected

Tool: SKILL.md [1/2] Description: --- name: sentry-security description: 'Sentry-specific security review based on real vulnerability history. Use when reviewing Sentry endpoints, serializers, or views for security issues. Trigger keywords: "sentry security review", "check for IDOR", "access control review", "org scoping", "cross-org", "security audit endpoint".' allowed-tools: Read Grep Glob Bash --- # Sentry Security Review Find security vulnerabilities in Sentry code by checking for the patte

Tool: SKILL.md [2/2] Description: the check is absent from every layer, mark the finding as **MEDIUM** (needs verification), not HIGH.

Malicious tool definition detected

Tool: references/endpoint-patterns.md Description: # Endpoint Security Patterns ## Contents - Authorization flow - Common IDOR patterns (with real examples) - Base class requirements - convert_args() scoping ## Authorization Flow Every Sentry API request follows this flow: ``` dispatch() → initial() → request.access set → convert_args() → handler method ``` `convert_args()` resolves URL kwargs to objects AND runs permission checks via `check_object_permissions()`.

Malicious tool definition detected

Tool: references/enforcement-layers.md Description: # Enforcement Layers ## Contents - Where security checks live in a Sentry request - Layer descriptions and key files - Tracing requirements ## Overview Sentry enforces security checks across multiple layers. A check in **any** layer counts as enforcement.

Malicious tool definition detected

Tool: references/output-sanitization.md Description: # Output Sanitization Patterns ## Contents - Email template injection - Markdown rendering - HTML safety ## Email Template Injection User-controlled strings (display names, team names, org names) rendered in email templates can contain HTML that gets interpreted by email clients.

Malicious tool definition detected

Tool: references/privilege-escalation.md Description: # Privilege Escalation Patterns ## Contents - Role hierarchy enforcement - Team role manipulation - Superuser/staff checks ## Role Hierarchy Sentry's organization roles from lowest to highest: ``` member → admin → manager → owner ``` Team roles: ``` contributor → admin ``` **Rule:** A user can only modify roles at or below their own level.

Malicious tool definition detected

Tool: references/serializer-patterns.md Description: # Serializer Security Patterns ## Contents - ActorField vs OwnerActorField - Foreign key fields in serializers - Request body ID validation ## ActorField vs OwnerActorField `ActorField` accepts any user or team ID without validating the requesting user's relationship to that actor.

Malicious tool definition detected

Tool: references/token-lifecycle.md Description: # Token & Session Security Patterns ## Contents - Token refresh validation - Org-level token scoping - Member status checks - Impersonation controls ## Token Refresh Validation ### Real vulnerability: Inactive app token refresh (PR #105269) SentryApps that were deactivated (unpublished, disabled) could still refresh their API tokens.