error-tracking-react-native
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the official PostHog React Native SDK and its associated peer dependencies (e.g.,
posthog-react-native,expo-file-system,react-native-device-info) from standard package registries. These are legitimate resources provided by the vendor for the skill's stated purpose. - [COMMAND_EXECUTION]: The documentation includes shell commands for package installation and iOS project configuration (
pod install). These are standard development tasks required for React Native integration and do not involve unauthorized or suspicious command execution. - [CREDENTIALS_UNSAFE]: The integration examples correctly use placeholders (e.g.,
<ph_project_token>) and explicitly advise developers to use environment variables instead of hardcoding API keys or host URLs, adhering to security best practices. - [INDIRECT_PROMPT_INJECTION]: The documentation describes how the PostHog platform processes exception data (types, messages, and stack traces) for issue grouping and searching. While this highlights the platform's data ingestion surface, the skill itself does not implement automated data processing tools that would expose the agent to injection risks.
Audit Metadata