sentry

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
4
Flagged
4
Chunks
5
Flagged Files (4)
LICENSE.txtHIGH
78.3%

Malicious tool definition detected

Tool: LICENSE.txt [1/2] Description: Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1.

Tool: LICENSE.txt [2/2] Description: this License.

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: "sentry" description: "Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require `SENTRY_AUTH_TOKEN`." --- # Sentry (Read-only Observability) ## Quick start - If not already authenticated, ask the user to provide a valid `SENTRY_AUTH_TOKEN` (read-only scopes such as `project:read`, `event:read`) or to log in

agents/openai.yamlHIGH
78.3%

Malicious tool definition detected

Tool: agents/openai.yaml Description: interface: display_name: "Sentry (Read-only Observability)"

scripts/sentry_api.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/sentry_api.py Description: #!/usr/bin/env python3 import argparse import json import os import re import sys import time from urllib.error import HTTPError, URLError from urllib.parse import urlencode from urllib.request import Request, urlopen DEFAULT_BASE_URL = "https://sentry.io" DEFAULT_ORG = "your-org" DEFAULT_PROJECT = "your-project" MAX_LIMIT = 50 EMAIL_RE = re.compile(r"[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}") IP_RE = re.compile(r"\b(?:\d{1,3}\.){3}\d{1,3}\b") def r

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
4
Files Flagged
4
Chunks Analyzed
5
Analyzed
Feb 21, 2026, 04:38 AM
Security Audit — runlayer — sentry