error-tracking-ruby-on-rails
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill facilitates sending application exception data and system metadata to PostHog's infrastructure (app.posthog.com). This is the intended primary function of an error-tracking integration and is documented as the core use case.
- [EXTERNAL_DOWNLOADS]: The instructions involve installing the official vendor gems posthog-ruby and posthog-rails via standard package management (bundle install). These are legitimate resources provided by the skill author.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an ingestion surface for untrusted data by automatically capturing exceptions from web controllers and background jobs. While this allows external data to enter the PostHog platform, the risk is inherent to error tracking, and the skill provides standard implementation guidance without introducing unusual vulnerabilities.
- [COMMAND_EXECUTION]: The skill uses standard Ruby on Rails CLI commands, such as rails generate posthog:install, to automate the creation of configuration files within the project environment.
Audit Metadata