finding-replay-for-issue
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official PostHog tools (e.g.,
posthog:execute-sql,posthog:session-recording-get) to perform its primary function of troubleshooting errors. The workflow is transparent and limited to the vendor's own environment. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external data from error tracking issues.
- Ingestion points: Retrieves issue details such as
fingerprintanddescriptionviaposthog:error-tracking-issues-retrieve(SKILL.md). - Boundary markers: Fetched data is interpolated directly into SQL queries and AI focus parameters without explicit delimiters or instructions to ignore embedded instructions.
- Capability inventory: Accesses the database via
posthog:execute-sqland performs AI-based summarization usingposthog:session-recording-summarize. - Sanitization: No explicit sanitization or validation of the fetched metadata is defined within the skill instructions; it relies on the underlying platform tool implementation for security.
Audit Metadata