instrument-integration
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automates the installation of official PostHog SDKs from verified registries such as NPM, PyPI, and RubyGems. It also correctly references the official PostHog GitHub repositories for native iOS and Android development.\n- [COMMAND_EXECUTION]: The skill instructs the agent to use standard local package managers to install necessary dependencies. It also includes instructions to run verification scripts, such as linters or formatters, strictly limited to the files modified during the session, which minimizes the risk of unintended project-wide changes.\n- [SAFE]: The skill implements secure secret management. It retrieves project tokens via a dedicated internal tool (MCP server) and ensures they are stored in framework-appropriate environment files (e.g., .env.local) rather than being hardcoded in the application source code.
Audit Metadata