filtering-bot-traffic
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documents standard platform features for bot detection and traffic classification. It provides templates for TrendsQuery JSON and HogQL SQL queries that utilize vendor-specific properties like
$virt_is_botand functions such asisLikelyBot. All functions and properties are internal to the PostHog environment. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of untrusted external data (User-Agent strings) to classify traffic.
- Ingestion points: The agent is instructed to read
properties.$user_agentandproperties.$raw_user_agentfrom theeventstable inSKILL.md. - Boundary markers: No specific delimiters or "ignore instructions" warnings are included in the query recipes, as the context is analytical data processing rather than prompt construction.
- Capability inventory: The skill's capabilities are restricted to data querying and filtering within the PostHog engine. There are no subprocess calls, file-write operations, or network exfiltration patterns detected.
- Sanitization: The skill uses built-in HogQL functions (
isLikelyBot,getTrafficType) which interpret the User-Agent input as a string for pattern matching, mitigating the risk of instructions within the data being executed.
Audit Metadata