installing-posthog-from-chat
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the
wizard-install-statustool and is instructed to relay thenext_stepfield directly to the user. While this creates a trust boundary where external data enters the conversation, the source is the vendor's own cloud infrastructure. No specific sanitization is mentioned for these status messages.
Audit Metadata