debugging-surveys

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/repos.py script facilitates the cloning of official PostHog SDK and monorepo source code from the vendor's official GitHub organization (github.com/PostHog). This is a standard developer workflow and involves trusted sources.
  • [COMMAND_EXECUTION]: The skill uses subprocess.run within scripts/repos.py to execute git clone and git remote commands. These executions are limited to managing local source code checkouts and target the vendor's official repositories.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection as it processes external survey definitions and HogQL query results.
  • Ingestion points: Data enters the context via the survey API and execute-sql tool outputs.
  • Boundary markers: Explicit boundary markers for external data are not defined in the instructions.
  • Capability inventory: Capabilities include file system interaction for repo management (git clone) and read-only database queries (execute-sql).
  • Sanitization: No specific sanitization or filtering of survey question text or query results is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 03:59 PM
Security Audit — agent-trust-hub — debugging-surveys