skills/posthog/ai-plugin/skills-store/Gen Agent Trust Hub

skills-store

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill facilitates the discovery and management of agent workflows using official tools provided by PostHog, which is a well-known service. All remote interactions and data retrievals are performed against PostHog infrastructure.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest instruction sets and scripts from an external source (PostHog) and advises the agent to adopt retrieved content as system instructions. While this is the intended purpose of a skill store, it establishes a surface where agent behavior is guided by remote data.
  • Ingestion points: The posthog:skill-get tool retrieves a body field containing markdown instructions, and posthog:skill-file-get retrieves file content for scripts and reference documents.
  • Boundary markers: The skill does not define specific delimiters or "ignore embedded instructions" warnings for the retrieved content.
  • Capability inventory: The skill uses the PostHog MCP toolset, enabling the agent to list, fetch, create, and update remote skill assets.
  • Sanitization: No explicit sanitization or validation of the retrieved markdown instructions or script content is performed by the skill itself before implementation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:33 PM
Security Audit — agent-trust-hub — skills-store