Agent skill · security · jeremylongshore
sentry-security-basics
Configure Sentry security settings and data protection.
Why this skill is useful
Provides specific configurations and best practices for securing Sentry, including PII scrubbing and compliance measures that the AI wouldn't reliably generate on its own.
What it needs
Requires sentry account access. About 7k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Sentry Security Basics Overview Configure Sentry's security posture: PII scrubbing with beforeSend, built-in data scrubbing, IP anonymization, browser SDK URL filtering, DSN vs auth token handling, CSP reporting, and GDPR data deletion. Covers both client-side (SDK) and server-side (dashboard) controls. Prerequisites Sentry project created with Owner or Admin role @sentry/node >= 8.x or @sentry/browser >= 8.x installed (or sentry-sdk >= 2.x for Python) Compliance requirements identified (GDPR, SOC 2, HIPAA, CCPA) List of sensitive data patterns for your domain (PII fields, API keys, tokens) Instructions Step 1 — Understand DSN vs Auth Token Security The DSN (Data Source Name) is a client-facing identifier — it tells the SDK where to send events. It is NOT a secret. The DSN cannot read data, delete events, or modify settings It is safe to ship in client-side JavaScript bundles Restrict abuse via Allowed Domains (Project Settings > Client Keys > Configure) Auth tokens ARE secrets — they grant API access to read/write/delete data: Step 2 — Disable Default PII Collection sendDefaultPii defaults to false — but always set it explicitly so intent is clear: When sendDefaultPii: false (default): No IP addresses attached to events No cookies sent in request data No user-agent strings in request headers No request body data captured User context must be set manually via Sentry.setUser() Step 3 — Client-Side PII Scrubbing with beforeSend beforeSend runs before every event leaves the client. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/sentry-security-basics