expo-skill-feedback
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill transmits telemetry and feedback to PostHog, a well-known analytics service, which is documented and expected behavior for this skill's purpose.
- [SAFE]: Telemetry is opt-in by default, requiring explicit user consent or specific environment variable configuration before any data is transmitted.
- [SAFE]: Data collection is limited to anonymous identifiers (hashed installation IDs), ratings, and feedback notes. The implementation includes logic to prevent the accidental collection of sensitive data like code, prompts, or secrets.
- [SAFE]: The skill relies exclusively on Node.js built-in modules and does not involve external package dependencies or remote code execution.
- [SAFE]: Command execution patterns, such as the background process spawning in
skill-event.cjs, are implemented safely using internal script paths and validated inputs.
Audit Metadata