Skip to main content

sentry-alert-tuner

Optimizes Sentry configurations to reduce alert fatigue, ensuring actionable alerts for effective incident management.

Install this skill

or
80/100

Security score

The sentry-alert-tuner skill was audited on May 15, 2026 and we found 4 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 387

Webhook reference - potential data exfiltration

SourceSKILL.md
387- Use Slack workflow webhooks for high-volume status digests; keep Sentry integration for the urgent live channel.
medium line 405

Webhook reference - potential data exfiltration

SourceSKILL.md
405- Sentry's Teams integration is webhook-based; rate limits are per Teams workspace (~4 msg/sec). Same routing discipline as Slack.
medium line 250

Access to .env file

SourceSKILL.md
250- Set `release` from CI env (`SENTRY_RELEASE` or `process.env.GIT_SHA`)
medium line 376

Access to .env file

SourceSKILL.md
376- **No environment separation.** Staging events mixed with prod events. Always set `environment` in init from `process.env.NODE_ENV` or equivalent; alert rules scope to `environment:production`.
Scanned on May 15, 2026
View Security Dashboard
Installation guide →