sentry-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill facilitates debugging for Sentry SDK integrations and follows safety best practices such as redacting the Data Source Name (DSN) from configuration exports to prevent credential leakage.\n- [DATA_EXFILTRATION]: The skill accesses environment variables (SENTRY_DSN, NODE_ENV, SENTRY_RELEASE) and makes network connectivity requests using curl to official sentry.io endpoints. These domains are well-known services and the access is consistent with the skill's diagnostic purpose.\n- [PROMPT_INJECTION]: The skill processes application logs (Ingestion: SKILL.md) to help diagnose issues. This represents a surface for indirect prompt injection as no boundary markers are present to delimit untrusted log data. The skill possesses capabilities for shell command execution and file reading (Capability: SKILL.md, debug-script.md). Sanitization is present for internal configuration (DSN redaction) but not for ingested log content.\n- [COMMAND_EXECUTION]: The skill uses shell commands including npm, pip, curl, and grep to collect diagnostic information. These tools are restricted to the primary diagnostic functionality.
Audit Metadata