diagnosing-stacktrace-symbolication
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes a local Python script (
scripts/inspect_sourcemaps.py) to summarize and validate JavaScript source maps and chunk IDs during the debugging process. - [EXTERNAL_DOWNLOADS]: Fetches and installs official PostHog libraries and CLI tools (e.g.,
@posthog/cli,@posthog/rollup-plugin) from the public npm registry to perform symbolication and upload tasks. - [PROMPT_INJECTION]: The skill processes untrusted external data such as minified JavaScript files, source maps, and API responses from error tracking logs.
- Ingestion points: Analyzes local build artifacts and downloads symbol data containers from PostHog's API.
- Boundary markers: None explicitly defined in instructions for the agent to isolate untrusted data processing.
- Capability inventory: Performs local file reads via a Python helper script and network operations through the official
posthog-clitool. - Sanitization: Utilizes standard JSON parsing for metadata extraction; no execution of untrusted code or direct interpolation of data into sensitive prompts is observed.
Audit Metadata