pp-posthog

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: Instructions describe installing the posthog-pp-cli tool using npx and go install from the vendor's npm package and GitHub repository.\n- [EXTERNAL_DOWNLOADS]: The skill fetches external tools from @mvanhorn/printing-press-library (npm) and github.com/mvanhorn (GitHub) during the setup phase.\n- [COMMAND_EXECUTION]: The skill relies on executing shell commands through the posthog-pp-cli binary, including installation commands and the execution of specific PostHog queries.\n- [DATA_EXFILTRATION]: The tool includes a --deliver webhook:<url> feature that enables sending command outputs, which may contain sensitive PostHog data, to external webhooks.\n- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes data from external PostHog environments.\n
  • Ingestion points: Data is fetched from PostHog via commands like events property-drift and flags rollout-health.\n
  • Boundary markers: Not present.\n
  • Capability inventory: Includes file system writes via --deliver file:<path> and network operations via --deliver webhook:<url> and the feedback command.\n
  • Sanitization: None described.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 08:09 AM