posthog-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands (
curl,jq) to perform administrative tasks on a PostHog organization. These commands are transparently documented inSKILL.mdand rely on user-provided environment variables for authentication. - [EXTERNAL_DOWNLOADS]: The skill initiates network requests to
https://app.posthog.com/api/. These operations target the official API of PostHog, which is a well-known and established service. The network activity is consistent with the skill's stated purpose of managing enterprise access control. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses (such as member lists and activity logs) which are then processed by
jq. While this represents an intake of untrusted data from a remote source, the risk is minimal as the data is structured JSON from a specific service and the capability is limited to management operations.
Audit Metadata