---
title: "Sentry security checks"
type: skill-set
id: "sentry-skills/security-checks"
category: "Security"
publisher: "Sentry"
license: "Apache-2.0"
source: "https://github.com/getsentry/skills/tree/0c464f4"
canonical: "https://labs.pho.chat/en/skills/sentry-skills/security-checks"
open_in_pho: "https://pho.chat/customize?item=sentry-skills%2Fsecurity-checks&utm_source=labs&utm_medium=skill-page&utm_campaign=skills-library"
---

# Sentry security checks

Review GitHub Actions workflows for exploitable patterns and find secrets that leak through serializers and generated output.

Source: Sentry (Apache 2.0), copied at a pinned commit. Free to use. Part of the Phở Skills library (https://labs.pho.chat/en/skills).

## Skills in this set (2)
- [GitHub Actions Security Review](https://labs.pho.chat/en/skills/sentry-skills/security-checks/gha-security-review.md): GitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to "review GitHub Actions", "audit workflows", "check CI security", "GHA security", "workflow security…
- [Secret Serialization Review](https://labs.pho.chat/en/skills/sentry-skills/security-checks/secret-serialization.md): Finds secrets, tokens, passwords, and API keys that can leak through generated serialization: Python dataclass repr and asdict, attrs, pydantic model_dump, NamedTuple, JavaScript JSON.stringify and…

## Use it
- In Phở: open https://pho.chat/customize?item=sentry-skills%2Fsecurity-checks&utm_source=labs&utm_medium=skill-page&utm_campaign=skills-library and press Try, or add it so Phở loads it whenever a request matches. Phở works with your own API key (OpenAI, Anthropic, Google and others).
- Original files: https://github.com/getsentry/skills/tree/0c464f4 (Apache 2.0).
- Full machine-readable index: https://labs.pho.chat/skills.json