skillProductivity Skills1 min read
sentry-security-review
Investigates broadly, reports narrowly — only high-confidence, exploitable findings.
Systematic security audit that traces attacker-controlled input through framework mitigations before flagging, with severity tiers.
Install
npx skills add getsentry/skills -g -ySummary
The killer feature is the false-positive discipline: investigate the full codebase to understand data flows and framework protections, but only report findings you can prove are exploitable with attacker-controlled input. Classifies by severity with evidence and remediation. Language- and domain-aware (injection, XSS, auth, crypto). Pair with sentry-code-review for full-coverage PR analysis.
More in Productivity Skills
- 1 min readsentry-pr-writerPR descriptions that explain what, why, and context — not "fixes stuff."Read
- 1 min readcaveman-commitCommit messages that are terse, Conventional, and actually explain the why.Read
- 1 min readmattpocock/skillsThe TypeScript wizard's personal .claude directory, open-sourced. Hit GitHub Trending #1 within 24 hours and 40k+ stars in days.Read