sentry-security

Detect security vulnerabilities in Sentry endpoints, serializers, views, and token handling.

Updated Apr 1, 2026

Search Tags:#authorization #security #vulnerability #sentry #code-review #pattern-based #idor

Ready to run

npx skills add https://github.com/Harigithub11/sentry --skill sentry-security

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: sentry-security
Source: https://github.com/Harigithub11/sentry/tree/main/.agents/skills/sentry-security
Command: npx skills add https://github.com/Harigithub11/sentry --skill sentry-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security review of Sentry code to identify vulnerabilities based on patterns observed in real patches across endpoints, serializers, views, and token flows.

Core Features & Use Cases

Pattern-based detection drawn from extensive patch history to surface realistic issues.
Guidance across API, auth, and data access paths to support accurate, actionable findings.
Reference-driven workflow aligning with enforcement-layers and endpoint patterns for end-to-end traceability.

Quick Start

Provide a code snippet or diff illustrating a potential IDOR or mis-scoped permission in a Sentry endpoint so I can assess and propose a fix.

Frequently Asked Questions about sentry-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect IDOR vulnerabilities in Sentry endpoints during code review?▼

Detect IDOR vulnerabilities in Sentry endpoints by applying pattern-based security review against historical patches. This process checks API endpoints and data access paths to surface realistic mis-scoped permission issues for actionable fixes.

What security patterns should I check for when reviewing Sentry serializers and views?▼

When reviewing Sentry serializers and views, check for access control, output sanitization, and token handling patterns. Reference real patch histories to identify where enforcement layers should exist to prevent privilege escalation.

Can I use real patch history to guide Sentry security reviews for access control?▼

Yes, you can use real patch history to guide Sentry security reviews. Pattern-based detection aligns reviews with endpoint patterns and privilege escalation references to provide end-to-end traceability for accurate findings.

How do I find missing authorization checks in Sentry API token handling?▼

Find missing authorization checks in Sentry API token handling by mapping code against reference patterns from recent security patches. This highlights where output sanitization and access control enforcement should be applied.

Does pattern-based security review work for preventing privilege escalation in Sentry code?▼

Pattern-based security review works for preventing privilege escalation in Sentry code by consulting enforcement-layers and endpoint-pattern references. It traces data access paths to ensure checks exist where real vulnerabilities were previously patched.