instrument-error-tracking

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill directs the installation of official PostHog SDKs and a setup utility (@posthog/wizard) from public registries. These are vendor-owned resources used for the skill's primary purpose.
  • [COMMAND_EXECUTION]: The instructions involve executing standard package management commands (e.g., npm, pip, go get) to install dependencies in the local development environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes steps to analyze project files (like package.json or requirements.txt) to identify the application's platform. This constitutes a benign data ingestion surface necessary for the skill's functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 08:15 PM