signals-scout-error-tracking
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for error tracking within the PostHog ecosystem and uses official vendor-provided tools for querying and reporting.
- [COMMAND_EXECUTION]: The skill utilizes
execute-sqlto perform analytics on theeventstable. This is an intended functionality for error analysis and does not involve arbitrary shell command execution. - [DATA_EXFILTRATION]: Data is processed and sent to an internal report inbox via
emit_reportandedit_report. No evidence of exfiltration to external or unauthorized domains was found. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted error data (stack traces, exceptions) for analysis. While this presents an attack surface, the agent uses this data for pattern matching and reporting rather than execution, which is consistent with its primary monitoring purpose.
Audit Metadata