package-posthog-red
Warn
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONPERSISTENCE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The
redentry point script fetches dependencies directly from GitHub repositories (github:getcolors/posthogandgithub:getcolors/once) at specific commit hashes if they are not found locally. - [DYNAMIC_EXECUTION]: The skill uses dynamic
import()to load and execute code from computed paths, specifically from a local cache directory (~/.cache/package-posthog-red) or an environment-defined path (POSTHOG_LIB_ROOT). - [COMMAND_EXECUTION]: The script executes
bun installat runtime to resolve and install the downloaded dependencies into a temporary staging directory. - [PERSISTENCE]: The skill documentation and logic describe modifying the user's
~/.ssh/configfile to insert persistent host configurations and managing SSH identity files in~/.ssh/for the deployment.
Audit Metadata