Sentry
Named by 12 kept items in this workspace.
6 items name it under tools, 4 under affected products and 2 under classification.technologies.
The items that name it 12
Hardware watchdog running on Nvidia's BlueField-4 DPU chip that watches an agent's behavior and can quarantine a misbehaving AI agent within milliseconds, without the agent's permission, since the agent has no way to reach or override it
via MCP
Public write-only DSN (no auth) allows event injection; Seer AI's analyze_issue_with_seer tool trusted by coding agent, enabling agent-to-agent lateral movement and RCE via malicious npm package
Error/incident tracking tool; cited both as an exfiltration channel abused by DPRK malware and as the untrusted data source in the 'agentjacking' MCP injection scenario
Event ingestion API and Sentry MCP server; accepts arbitrary payloads via public DSN and returns them to AI agents as trusted output.
Legitimate crash/telemetry reporting service whose ingest API and envelope format were abused to disguise exfiltrated source code as ordinary telemetry
Legitimate error monitoring/diagnostics platform, abused by the malicious package via a hardcoded DSN to exfiltrate stolen client IDs, PFX passwords, and base64-encoded PFX certificate data via SentrySdk.Init and SentrySdk.CaptureMessage
Legitimate error-reporting service; the attacker's exfil domain (sentry.anyclaw.store) is named to mimic legitimate Sentry telemetry traffic
Open-source error-tracking and performance-monitoring platform whose event ingestion accepts arbitrary payloads from anyone with the DSN
In every workspace you can read 15
Security
All technologies in this workspace.