debugging-surveys
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/repos.pyscript facilitates the cloning of official PostHog SDK and monorepo source code from the vendor's official GitHub organization (github.com/PostHog). This is a standard developer workflow and involves trusted sources. - [COMMAND_EXECUTION]: The skill uses
subprocess.runwithinscripts/repos.pyto executegit cloneandgit remotecommands. These executions are limited to managing local source code checkouts and target the vendor's official repositories. - [INDIRECT_PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection as it processes external survey definitions and HogQL query results.
- Ingestion points: Data enters the context via the
surveyAPI andexecute-sqltool outputs. - Boundary markers: Explicit boundary markers for external data are not defined in the instructions.
- Capability inventory: Capabilities include file system interaction for repo management (
git clone) and read-only database queries (execute-sql). - Sanitization: No specific sanitization or filtering of survey question text or query results is described.
Audit Metadata