Is sentry-onboarding safe to install?

SaferSkills independently audited sentry-onboarding (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/sentry-onboarding/SKILL.md · 1 file

skills/sentry-onboarding/SKILL.md2.3 KB · Markdown

name: sentry-onboarding

description: Create and configure Sentry projects across staging/production environments via REST API. Use when user needs to onboard a new service to Sentry, create Sentry projects, or set up error monitoring for a new application.

Sentry Onboarding

Create and configure Sentry projects across multiple environments via REST API.

Setup

Before using this skill, configure your Sentry instances:

# Add your Sentry instances here
SENTRY_INSTANCES:
  - name: staging
    url: https://sentry-staging.example.com
    token_env: SENTRY_STAGING_TOKEN
    org: your-org
  - name: prod
    url: https://sentry.example.com
    token_env: SENTRY_PROD_TOKEN
    org: your-org

Workflow

Step 1: Collect Information

Ask the user for:

Service name (e.g., payment-service)
Platform — must be framework-level, not language-level:

Java → java-spring-boot
Python → python-django / python-fastapi
JavaScript → javascript-nextjs / javascript-react
Go → go
Android → android
iOS → apple-ios

Team — which team should own this project
Environments — which instances to create in (staging, prod, or both)

Step 2: Verify Token

curl -s -H "Authorization: Bearer $TOKEN" "$SENTRY_URL/api/0/organizations/$ORG/teams/" | jq '.[].slug'

If 401 → token expired, guide user to regenerate.

Step 3: List Available Teams

curl -s -H "Authorization: Bearer $TOKEN" "$SENTRY_URL/api/0/organizations/$ORG/teams/" | jq '.[] | {slug, name}'

Step 4: Create Project

curl -s -X POST \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name": "<service-name>", "platform": "<platform>"}' \
  "$SENTRY_URL/api/0/teams/$ORG/<team-slug>/projects/"

Step 5: Extract DSN

curl -s -H "Authorization: Bearer $TOKEN" \
  "$SENTRY_URL/api/0/projects/$ORG/<project-slug>/keys/" | jq '.[0].dsn.public'

Step 6: Generate SDK Snippet

Based on platform, generate the SDK initialization code with the DSN.

Rules

Production operations require explicit user confirmation
Create staging first, verify, then create prod
Platform must be framework-level (e.g., java-spring-boot not java)
Project slug is auto-generated from name

sentry-onboarding— agent skill

Is sentry-onboarding safe to install?

Sentry Onboarding

Setup

Workflow

Step 1: Collect Information

Step 2: Verify Token

Step 3: List Available Teams

Step 4: Create Project

Step 5: Extract DSN

Step 6: Generate SDK Snippet

Rules

Audit the pieces. Scan the whole. Decide.