sentry
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strong security defaults by requiring the
SENTRY_AUTH_TOKENto be set as a local environment variable rather than being passed in chat or hardcoded. - [SAFE]: The bundled Python script (
scripts/sentry_api.py) includes built-in PII (Personally Identifiable Information) redaction for emails and IP addresses using regular expressions before outputting data. - [SAFE]: The instructions explicitly guide the user to create tokens with limited, read-only scopes (
project:read,event:read,org:read), adhering to the principle of least privilege. - [SAFE]: Network operations are restricted to the official Sentry API domain (
https://sentry.io) by default, and the script uses standard library functions (urllib) without dangerous external dependencies.
Audit Metadata