configuring-experiment-rollout

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill defines operational logic for managing PostHog feature flags and experiment rollouts. It does not contain any malicious code, obfuscation, or unauthorized network operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles user-provided input for experiment configuration (percentages and ratios).
  • Ingestion points: User-supplied rollout percentages and variant split ratios mentioned in SKILL.md.
  • Boundary markers: The instructions in SKILL.md mandate a 'Disambiguation question' to clarify user intent before proceeding.
  • Capability inventory: The skill facilitates updating feature flag configurations via an implied agent tool or API (no local script capabilities detected in SKILL.md or references/changing-distribution-after-launch.md).
  • Sanitization: The logic in SKILL.md includes checks for variant split sums and explicit user confirmation for ambiguous inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 01:06 AM
Security Audit — agent-trust-hub — configuring-experiment-rollout