PostHog CLI
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process product analytics and event data from PostHog's external API. This external data could theoretically contain malicious instructions embedded in event properties or names.
- Ingestion points: Event data and analytics query results fetched through the
posthogCLI (SKILL.md). - Boundary markers: Absent. The instructions do not specify the use of delimiters or specific warnings to ignore instructions embedded within the analytics data.
- Capability inventory: Executes
posthogCLI commands and manages feature flags. - Sanitization: Not identified. There is no mention of filtering or sanitizing the data returned from the PostHog platform before processing.
Audit Metadata