feature-flags-nextjs
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation facilitates the installation of official PostHog libraries, such as
posthog-js,@posthog/react, andposthog-node, from verified package registries (npm, PyPI, etc.). - [REMOTE_CODE_EXECUTION]: The skill mentions an official setup wizard executed via
npx @posthog/wizard@latest. As this is a tool provided by the documented vendor, it is considered a legitimate and safe administrative utility. - [SAFE]: No security issues were detected. The skill instructions prioritize security by advising the use of environment variables instead of hardcoding API keys and correctly reference official infrastructure (e.g.,
posthog.com,us.i.posthog.com).
Audit Metadata