bootstrap-posthog
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires running
mix deps.getto install theposthoghex dependency. - [EXTERNAL_DOWNLOADS]: The skill adds a project dependency on the PostHog Elixir package and injects a client-side JavaScript snippet that loads the PostHog library from their official hosted domain.
- [DATA_EXFILTRATION]: The skill is designed to collect and transmit analytics data, including user emails, IDs, and IP addresses, to the PostHog service as its primary function.
Audit Metadata