1 file · 12 lines · 362 B
View on GitHub
- sentry-local.json 12 lines · 362 B
sentry-local.json
JSON
{
"mcpServers": {
"sentry": {4 keys}
}
}
Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-11-08
3 observations
scanner score 12/100
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- MCP server references in the skill manifest without version pinning are a rug-pull risk.MCP Rug Pull · SKILL.md:1
- npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.MCP Rug Pull · SKILL.md:3
- npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.MCP Rug Pull · sentry-local.json:4
Learn more about NVIDIA SkillSpector or how components are reviewed.