chore(deps): update getsentry/skills digest to e7a87fa

[renovate]

This PR contains the following updates:

Package	Update	Change
getsentry/skills	digest	c813735 → e7a87fa

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[toolhive-release-app]

🛡️ Skill Security Scan Results

✅ agents-md

• Status: Passed
• Findings: 2
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: getsentry/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ claude-settings-audit

• Status: Passed
• Findings: 6
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: getsentry/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ code-review

• Status: Passed
• Findings: 3
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: getsentry/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ code-simplifier

• Status: Passed
• Findings: 1
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: getsentry/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ commit

• Status: Passed
• Findings: 3
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: getsentry/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ create-branch

• Status: Passed
• Findings: 3
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: getsentry/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ django-access-review

• Status: Passed
• Findings: 3

✅ django-perf-review

• Status: Passed
• Findings: 0

✅ doc-coauthoring

• Status: Passed
• Findings: 3
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: getsentry/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ find-bugs

• Status: Passed
• Findings: 5
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: getsentry/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ gh-review-requests

• Status: Passed
• Findings: 5
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: getsentry/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ iterate-pr

• Status: Passed
• Findings: 8
• Allowed (not blocking): 2
  • MANIFEST_MISSING_LICENSE (Allowed: getsentry/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)
  • RESOURCE_ABUSE_INFINITE_LOOP (Allowed: The scripts/monitor_pr_checks.py helper polls PR check status in a while True: loop with bounded retries and sleep — legitimate for waiting until CI reaches a terminal state. The script has a timeout and exit conditions.)

✅ pr-writer

• Status: Passed
• Findings: 5
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: getsentry/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ prompt-optimizer

• Status: Passed
• Findings: 3
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: getsentry/skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ security-review

• Status: Passed
• Findings: 3

❌ skill-scanner

• Status: Failed
• Findings: 32
• Blocking: 21

Blocking issues:

• [ATR_2026_00213] (HIGH) Pattern detected: Ignore previous instructions (references/prompt-injection-patterns.md:105)
• [ATR_2026_00095] (CRITICAL) Pattern detected: Ignore previous instructions (references/prompt-injection-patterns.md:111)
• [ATR_2026_00213] (HIGH) Pattern detected: Ignore previous instructions (references/prompt-injection-patterns.md:111)
• [ATR_2026_00063] (CRITICAL) Pattern detected: exfil (references/prompt-injection-patterns.md:116)
• [ATR_2026_00004] (CRITICAL) Pattern detected: ### Instruction (references/prompt-injection-patterns.md:121)
• [YARA_jailbreak_generic] (HIGH) Detects jailbreak attempts to bypass AI safety measures: example (references/prompt-injection-patterns.md:122)
• [YARA_jailbreak_generic] (HIGH) Detects jailbreak attempts to bypass AI safety measures: Example (references/prompt-injection-patterns.md:124)
• [ATR_2026_00004] (CRITICAL) Pattern detected: SYSTEM: ignore (references/prompt-injection-patterns.md:125)
• [ATR_2026_00095] (CRITICAL) Pattern detected: ignore previous instructions (references/prompt-injection-patterns.md:125)
• [ATR_2026_00095] (CRITICAL) Pattern detected: ignore previous instructions (references/prompt-injection-patterns.md:142)
• [ATR_2026_00265] (HIGH) Pattern detected: ignore previous instructions (references/prompt-injection-patterns.md:142)
• [ATR_2026_00095] (CRITICAL) Pattern detected: ignore previous instructions (references/prompt-injection-patterns.md:143)
• [ATR_2026_00265] (HIGH) Pattern detected: ignore previous instructions (references/prompt-injection-patterns.md:143)
• [ATR_2026_00095] (CRITICAL) Pattern detected: ignore previous instructions (references/prompt-injection-patterns.md:144)
• [ATR_2026_00265] (HIGH) Pattern detected: ignore previous instructions (references/prompt-injection-patterns.md:144)
• [ATR_2026_00095] (CRITICAL) Pattern detected: ignore previous instructions (references/prompt-injection-patterns.md:145)
• [YARA_jailbreak_generic] (HIGH) Detects jailbreak attempts to bypass AI safety measures: Example (references/prompt-injection-patterns.md:145)
• [ATR_2026_00095] (CRITICAL) Pattern detected: ignore previous instructions (references/prompt-injection-patterns.md:146)
• [ATR_2026_00265] (HIGH) Pattern detected: ignore previous instructions (references/prompt-injection-patterns.md:146)
• [ATR_2026_00010] (CRITICAL) Pattern detected: `referenc (references/prompt-injection-patterns.md:150)
• [YARA_jailbreak_generic] (HIGH) Detects jailbreak attempts to bypass AI safety measures: references (references/prompt-injection-patterns.md:150)

Allowlisted (not blocking):

• YARA_prompt_injection_unicode_steganography (Allowed: The skill documents invisible Unicode steganography (\U000e0001 tag characters) as a prompt-injection vector. Describing the attack class is required for the skill to teach detection of it.)

---

Summary: Scanned 16 skill(s), found 21 blocking issue(s).

⚠️ Action Required: Review the blocking findings. Add a justified entry to the skill's security.allowed_issues[] in its spec.yaml if the finding is a false positive.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.