error-tracking-react
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official Node.js libraries (
posthog-js,@posthog/react) via standard package managers. These are legitimate resources owned and maintained by the vendor (PostHog). - [INDIRECT_PROMPT_INJECTION]: The skill describes surfaces where the agent might process untrusted data, specifically exception messages, types, and stack traces (ingestion points located in
references/monitoring.mdandreferences/assigning-issues.md). While this represents a potential surface for indirect prompt injection, the skill is instructional and does not propose any automated execution or unsafe interpolation of this data. No boundary markers or sanitization steps are explicitly discussed in the reference documentation.
Audit Metadata