checking-deploy-timing
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (
gh) to search for pull requests, view PR details, and compare commit ancestry via the GitHub API. These commands are restricted to the officialPostHog/posthogrepository and represent standard development operations. - [DATA_EXFILTRATION]: Reads hidden deployment annotations using the
posthog:annotations-listtool. This is a functional requirement to determine deployment timing within the vendor's own environment and does not involve unauthorized data transfer. - [EXTERNAL_DOWNLOADS]: Interacts with the GitHub API to fetch repository metadata. GitHub is a well-known service, and the interaction is limited to the author's own public repository content.
Audit Metadata