posthog-cost-tuning
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
app.posthog.comandus.i.posthog.com. These are official endpoints for PostHog, a well-known analytics service, and are used here for querying usage data and sending analytics events. - [COMMAND_EXECUTION]: Uses
curlin Bash scripts to interact with the PostHog API. This is used appropriately for the skill's stated purpose of auditing event volume and monitoring budgets. - [CREDENTIALS_UNSAFE]: The skill correctly uses environment variables (
$POSTHOG_PERSONAL_API_KEY) to handle sensitive API keys rather than hardcoding them, following standard security best practices. - [SAFE]: The provided code snippets for event sampling and bot filtering are standard implementation patterns for the PostHog JavaScript library.
Audit Metadata