XferOps Sentry

• Analyzed: May 11, 2026, 4:46 AM
• Findings: 1
• Version: 0.1.0
• Hash: a767e0b0c92f313586554a799988128ee666d489ac190be6cba08ec0de7c4560
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as benign. The `SKILL.md` primarily provides documentation for setting up and using a Sentry integration via MCP, including instructions for installing `@sentry/mcp-server` and configuring a `SENTRY_ACCESS_TOKEN`. While the documentation mentions that the token 'may be stored in Secrets Manager as `xferops/sentry/api-token`', this is a descriptive hint for credential retrieval necessary for the skill's stated purpose (querying Sentry), not an instruction for malicious credential theft or exfiltration. There is no evidence of prompt injection designed to subvert the agent, exfiltrate data, establish persistence, or execute arbitrary malicious code.