posthog-errors

SUSPICIOUS: the core behavior matches a PostHog monitoring digest, and the declared API domains and read-only analytics purpose are broadly coherent. The main risks are unattended notification, persistent reporting of potentially sensitive error data, untrusted external content being summarized by an agent with shell/write capability, and some installer/auth-path trust uncertainty around MCP tooling rather than clear malicious behavior.