instrument-logs
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs standard, well-known OpenTelemetry libraries from official registries (NPM, PyPI, Maven, Go) to enable logging instrumentation.
- [COMMAND_EXECUTION]: Executes package manager commands (e.g., npm install, pip install, go get) to add dependencies as part of the setup process.
- [DATA_EXFILTRATION]: The skill configures the application to send log data to PostHog's official ingestion endpoints (us.i.posthog.com or eu.i.posthog.com). This is the intended primary purpose of the skill and utilizes the vendor's official infrastructure.
- [CREDENTIALS_UNSAFE]: Appropriately handles sensitive credentials by instructing the agent to use environment variables and retrieve API tokens via the PostHog MCP server rather than hardcoding them.
Audit Metadata