cleaning-up-stale-feature-flags
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted external data retrieved from the PostHog API during its auditing workflow.
- Ingestion points: The skill ingests flag names, descriptions, and metadata via the
posthog:feature-flag-get-allandposthog:feature-flag-get-definitiontools as described in the workflow of SKILL.md. - Boundary markers: No specific boundary markers or delimiters are defined to isolate or instruct the agent to ignore potentially malicious content within flag metadata.
- Capability inventory: The skill uses tools capable of modifying the project state, specifically
posthog:feature-flag-disableandposthog:delete-feature-flag. - Sanitization: The skill does not specify any sanitization or validation of the flag data retrieved from the API.
- Note: The risk is significantly mitigated by mandatory user confirmation and deployment check steps before any flags are disabled or deleted.
Audit Metadata