diagnosing-stacktrace-symbolication
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official PostHog CLI tools and plugins (@posthog/cli, @posthog/rollup-plugin, etc.) for its intended purpose of managing and debugging symbol sets. All external dependencies are attributed to the skill's author, PostHog.
- [SAFE]: The provided Python script (
inspect_sourcemaps.py) performs safe static analysis of source maps and JavaScript files. It does not use any third-party libraries, execute code, or perform network operations. - [COMMAND_EXECUTION]: Employs common shell utilities like
find,rg, andjqfor inspecting local build artifacts. These commands are used transparently and are appropriate for a developer debugging task. - [CREDENTIALS_UNSAFE]: Security best practices are followed for credential management; sensitive tokens are referenced as environment variables (e.g.,
$POSTHOG_PERSONAL_API_KEY) rather than being hardcoded. - [DATA_EXFILTRATION]: No suspicious network operations or data exfiltration patterns were detected. Network activity is limited to official PostHog API interactions via the CLI and MCP tools.
Audit Metadata