posthog-analytics
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official PostHog libraries including
posthog-js,posthog-node, and theposthogPython package. These are well-known, standard dependencies for product analytics. - [CREDENTIALS_UNSAFE]: Provides clear instructions for managing API keys via environment variables. It includes a specific property sanitization helper (
sanitizeProperties) to prevent the accidental tracking of sensitive data such as passwords, tokens, or credit card numbers. - [DATA_EXFILTRATION]: Network communication is limited to official PostHog endpoints (e.g.,
us.i.posthog.com) for event tracking and feature flag retrieval. - [COMMAND_EXECUTION]: Code snippets demonstrate standard usage of PostHog's API and the Model Context Protocol (MCP) for dashboard management without arbitrary shell execution or unsafe dynamic code patterns.
Audit Metadata