Security risk report for @forgecat/openai_skills_sentry v0.0.11
Source Integrity
Low
Profile is sourced from OpenAI's official skills repository (github.com/openai/skills) with clear attribution and Apache-2.0 license.
Metadata includes original commit hash and timestamp, enabling verification of authenticity and integrity.
Agent Intent
Low
Content describes legitimate read-only Sentry API operations (list issues, fetch events, retrieve details) with no instructions to ignore system prompts, exfiltrate credentials, or modify system state.
Guidance is standard observability best practice: authenticate via token, call documented API endpoints, redact PII in output, never echo auth tokens.
No prompt injection, role hijacking, guidance poisoning, or system prompt leakage attempts detected.
Details
Evidence
"perform read-only queries with the bundled script"
"Always call the Sentry API (no heuristics, no caching)"
"Never ask the user to paste the full token in chat. Ask them to set it locally and confirm when ready."
"Never echo auth tokens."
"Redact PII in output (emails, IPs). Do not print raw stack traces."
Permissions
Low
Profile declares no tools or MCP servers; it is a documentation/guidance skill that instructs the agent to call an external Sentry API via a bundled Python script.
Authority is scoped to read-only API operations (GET endpoints only) on Sentry observability data, matching the stated purpose of inspecting issues and events.
Details
Evidence
"Always use these endpoints (GET only)"
"perform read-only queries with the bundled script"
No file_write, file_delete, shell, or subagent permissions declared.
MCP Risk
Low
No MCP servers are defined in the profile; the skill relies on a bundled Python script (sentry_api.py) and direct HTTPS calls to the public Sentry API.
Bundled script is from a trusted source (OpenAI) and is documented to handle pagination and transient error retries only, with no arbitrary code execution or network access beyond Sentry's API.
Details
Evidence
"(none)" — no MCP servers declared
"Use `scripts/sentry_api.py` for deterministic API calls. It handles pagination and retries once on transient errors."
ForgeCat