Skip to main content

sentry-known-pitfalls

Helps troubleshoot Sentry issues by identifying common pitfalls and providing best practices for configuration and error handling.

Install this skill

or
59/100

Security score

The sentry-known-pitfalls skill was audited on May 12, 2026 and we found 17 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 166

Template literal with variable interpolation in command context

SourceSKILL.md
166const SENTRY_RELEASE = `myapp@${process.env.GIT_SHA || 'dev'}`;
medium line 187

Template literal with variable interpolation in command context

SourceSKILL.md
187return await fetch(`/api/users/${id}`).then(r => r.json());
medium line 197

Template literal with variable interpolation in command context

SourceSKILL.md
197return await fetch(`/api/users/${id}`).then(r => r.json());
medium line 41

Access to .env file

SourceSKILL.md
41- Environment variable management (`.env`, secrets manager, or CI/CD vars)
low line 72

Access to .env file

SourceSKILL.md
72Sentry.init({ dsn: process.env.SENTRY_DSN });
low line 75

Access to .env file

SourceSKILL.md
75// vite.config.ts: define: { __SENTRY_DSN__: JSON.stringify(process.env.SENTRY_DSN) }
low line 162

Access to .env file

SourceSKILL.md
162Sentry.init({ release: process.env.npm_package_version });
low line 166

Access to .env file

SourceSKILL.md
166const SENTRY_RELEASE = `myapp@${process.env.GIT_SHA || 'dev'}`;
low line 211

Access to .env file

SourceSKILL.md
211Sentry.init({ dsn: process.env.SENTRY_DSN });
low line 215

Access to .env file

SourceSKILL.md
215dsn: process.env.SENTRY_DSN,
low line 216

Access to .env file

SourceSKILL.md
216environment: process.env.NODE_ENV || 'development',
low line 221

Access to .env file

SourceSKILL.md
221if (process.env.VERCEL_ENV) return process.env.VERCEL_ENV;
low line 222

Access to .env file

SourceSKILL.md
222if (process.env.RAILWAY_ENVIRONMENT) return process.env.RAILWAY_ENVIRONMENT;
low line 223

Access to .env file

SourceSKILL.md
223return process.env.NODE_ENV || 'development';
medium line 293

Access to .env file

SourceSKILL.md
293| Hardcoded DSN | Spam events from attackers | `process.env.SENTRY_DSN` or build-time injection |
medium line 299

Access to .env file

SourceSKILL.md
299| No `environment` | Dev noise in prod dashboard | `environment: process.env.NODE_ENV` |
low line 68

External URL reference

SourceSKILL.md
68dsn: 'https://[email protected]/7890123',
Scanned on May 12, 2026
View Security Dashboard
Installation guide →