instrument-product-analytics
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by PostHog and relies on official PostHog domains (posthog.com, us.i.posthog.com, eu.i.posthog.com) and packages (@posthog/react, posthog-js, posthog-node). The procedures for identifying users via login forms and tracking behavioral data are standard for product analytics and are directed toward official infrastructure. No malicious patterns, obfuscation, or unauthorized data exfiltration were detected. Development tasks such as installing dependencies and running linters are within the expected scope of the tool's functionality. While a surface for indirect prompt injection exists because the agent must analyze codebase files, this is necessary for instrumentation and is mitigated by internal safety protocols.
Audit Metadata