feature-flags-nodejs
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive reference guide for integrating PostHog feature flag functionality into various application environments (Web, Node.js, Python, etc.).
- [CREDENTIALS_UNSAFE]: The instructions emphasize secure credential management, explicitly stating that developers should use environment variables for API keys and never hardcode them.
- [EXTERNAL_DOWNLOADS]: The documentation references standard installation procedures for official PostHog libraries (e.g.,
posthog-node,@posthog/react) via established package managers (npm, pip). - [DATA_EXFILTRATION]: The network communication patterns described (e.g., requests to
https://us.i.posthog.com) are consistent with the intended functionality of the PostHog analytics service and involve official vendor domains.
Audit Metadata