posthog-automation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external PostHog projects, which could contain instructions intended to influence the agent's behavior.
- Ingestion points:
POSTHOG_LIST_AND_FILTER_PROJECT_EVENTSandPOSTHOG_LIST_AND_MANAGE_PROJECT_FEATURE_FLAGSretrieve event properties and flag metadata from the PostHog API. - Boundary markers: The instructions do not define clear delimiters or "ignore instructions" directives for data retrieved from external sources.
- Capability inventory: The skill has the ability to perform write actions, including capturing events (
POSTHOG_CAPTURE_EVENT) and creating feature flags (POSTHOG_CREATE_FEATURE_FLAGS_FOR_PROJECT). - Sanitization: There is no mention of sanitizing or validating the properties or metadata retrieved from external sources before they are processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill directs the user to connect to a remote MCP server to enable its functionality.
- Endpoint:
https://rube.app/mcpis the required server configuration for the Rube MCP toolkit provided by Composio.
Audit Metadata