Skills getsentry

skills Skill collection

Agent skills for Sentry employees, following the Agent Skills open format.

Written for Sentry's own engineers: some skills follow Sentry's own conventions and brand. Skills for setting up Sentry itself are in getsentry/sentry-for-ai.

1,135 stars on GitHub, Nov 9, 2026 · 5 skills

Its skills, most installed first

  1. Use it when:
    You want a security review of a file, diff or component: injection, XSS, authentication, authorization, cryptography, SSRF and the like.
    It does:
    Loads reference guides for the kind of code and its language, researches the whole codebase to trace each input, and reports only what it confirms is exploitable.
    Age
    9 months
    Stars
    1.1K
    bottom 22%
    Total Downloads
    22.9K
    top 27%
    Weekly Downloads
    822
    top 30%
  2. Use it when:
    You're creating or updating a repo's AGENTS.md or CLAUDE.md and want it short and accurate.
    It does:
    Inspects lock files, scripts, CI, docs and code conventions first, picks root or nested scope, writes the smallest useful file and checks every path and command exists.
    Age
    9 months
    Stars
    1.1K
    bottom 22%
    Total Downloads
    7.5K
    bottom 37%
    Weekly Downloads
    235
    bottom 43%
  3. Use it when:
    You want the changes on your current branch checked for bugs and security holes before you merge.
    It does:
    Reads the full diff against the default branch, maps each file's inputs, queries, auth checks and external calls, then runs an 11-item security checklist on every file.
    Age
    9 months
    Stars
    1.1K
    bottom 22%
    Total Downloads
    7.3K
    bottom 36%
    Weekly Downloads
    173
    bottom 34%
  4. Use it when:
    You're reviewing a pull request or code change and want a short, general checklist.
    It does:
    Checks for runtime errors, quadratic or N+1 performance problems, side effects, breaking API changes, security gaps, test coverage and fit with the architecture.
    Age
    9 months
    Stars
    1.1K
    bottom 22%
    Total Downloads
    5.7K
    bottom 20%
    Weekly Downloads
    94
    bottom 19%
  5. Use it when:
    You want a repo's .github/workflows, its composite actions and the scripts they load checked for exploitable flaws.
    It does:
    Classifies each workflow's triggers, loads the matching attack references, runs eight checks from pwn requests and expression injection to supply chain and runners, and traces each attack.
    Age
    8 months
    Stars
    1.1K
    bottom 22%
    Total Downloads
    5K
    bottom 2%
    Weekly Downloads
    83
    bottom 16%