github analyzed d19e46b

elliottlawson/mcp-sentry

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 1 tools

transport stdio · http counts 1 tools · 0 res · 0 prompts permission surface via code analysis

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit d19e46b · analyzer v33 · 4w ago

suspicious endpoint sentry.io (telemetry) elliottlawson-mcp-sentry-d19e46b/build/sentry-client.js :4 const SENTRY_API_BASE = 'https://sentry.io/api/0/';
suspicious endpoint sentry.io (telemetry) elliottlawson-mcp-sentry-d19e46b/src/sentry-client.ts :5 const SENTRY_API_BASE = 'https://sentry.io/api/0/';

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 20

fs (weak) elliottlawson-mcp-sentry-d19e46b/scripts/version.js :20 import fs from 'fs';

shell (weak) elliottlawson-mcp-sentry-d19e46b/scripts/version.js :22 import { execSync } from 'child_process';

net elliottlawson-mcp-sentry-d19e46b/build/sentry-client.js :1 import axios from 'axios';
net elliottlawson-mcp-sentry-d19e46b/src/sentry-client.ts :1 import axios, { AxiosInstance } from 'axios';

secrets elliottlawson-mcp-sentry-d19e46b/build/index.js :21 const authToken = options.authToken || process.env.SENTRY_TOKEN;
secrets elliottlawson-mcp-sentry-d19e46b/src/index.ts :28 const authToken = options.authToken || process.env.SENTRY_TOKEN;

prepublishOnly elliottlawson-mcp-sentry-d19e46b/package.json :11 npm run build
prepare elliottlawson-mcp-sentry-d19e46b/package.json :12 npm run build