instrument-logs
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads official OpenTelemetry SDKs and OTLP exporters from standard registries (NPM and PyPI) to facilitate log ingestion to PostHog's infrastructure.
- [COMMAND_EXECUTION]: The agent is instructed to use system package managers like
npm,pip, andgo getto install the necessary dependencies for the detected platform. - [SAFE]: The skill implements secure secret management by utilizing environment variables and the PostHog MCP server for API token retrieval, specifically warning against hardcoding credentials.
- [SAFE]: The skill integrates with well-known PostHog ingestion endpoints (
us.i.posthog.com,eu.i.posthog.com) which are consistent with the vendor's official documentation and the skill's stated purpose.
Audit Metadata