instrument-error-tracking
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to install PostHog SDKs (e.g.,
npm install,pip install,go get) and run verification/cleanup scripts (e.g.,npm test,prettier). These are standard development operations consistent with the skill's purpose. - [EXTERNAL_DOWNLOADS]: The skill downloads official PostHog libraries from trusted package registries (NPM, PyPI, Pub.dev, RubyGems, etc.). All reference URLs point to official PostHog documentation and assets.
- [DATA_EXFILTRATION]: No exfiltration patterns were detected. The skill specifically instructs the agent to use environment variables for sensitive API keys and provides a secure mechanism via the PostHog MCP server to retrieve project tokens, preventing hardcoded credentials.
- [PROMPT_INJECTION]: The instructions are clear, technical, and focused on the stated goal. No attempts to override agent safety guidelines or extract system prompts were found.
Audit Metadata