pp-posthog
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Instructions describe installing the
posthog-pp-clitool usingnpxandgo installfrom the vendor's npm package and GitHub repository.\n- [EXTERNAL_DOWNLOADS]: The skill fetches external tools from@mvanhorn/printing-press-library(npm) andgithub.com/mvanhorn(GitHub) during the setup phase.\n- [COMMAND_EXECUTION]: The skill relies on executing shell commands through theposthog-pp-clibinary, including installation commands and the execution of specific PostHog queries.\n- [DATA_EXFILTRATION]: The tool includes a--deliver webhook:<url>feature that enables sending command outputs, which may contain sensitive PostHog data, to external webhooks.\n- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes data from external PostHog environments.\n - Ingestion points: Data is fetched from PostHog via commands like
events property-driftandflags rollout-health.\n - Boundary markers: Not present.\n
- Capability inventory: Includes file system writes via
--deliver file:<path>and network operations via--deliver webhook:<url>and thefeedbackcommand.\n - Sanitization: None described.
Audit Metadata