posthog-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is the configuration of a well-known analytics service (PostHog) using its official libraries.
- [EXTERNAL_DOWNLOADS]: Installs standard SDKs ('posthog-js', 'posthog-node', and 'posthog') from official package registries (npm and PyPI).
- [CREDENTIALS_UNSAFE]: The instructions correctly identify different types of API keys and mandate the use of environment variables and .gitignore for secret management, avoiding hardcoded credentials.
- [COMMAND_EXECUTION]: Shell command usage is restricted via the frontmatter 'allowed-tools' field to specific package manager operations (npm, pip), which is a defensive configuration.
Audit Metadata