signals-scout-product-analytics
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a legitimate product analytics monitoring tool. It uses authorized PostHog tools (MCP) within its designated environment to analyze conversion funnels, retention, and behavioral metrics. All referenced tools and behaviors align with the developer's stated purpose and the PostHog platform's standards.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data including database query results and existing report metadata, which represents a potential injection surface. The implementation mitigates risk by focusing on structured behavioral metrics and requiring validation of denominators (entrant volume) before reporting findings.
- Ingestion points:
SKILL.md(viaexecute-sql,insight-get, andinbox-reports-listtool outputs) - Boundary markers: None explicitly defined in the instructions.
- Capability inventory:
emit_report,edit_report, andexecute-sql(read-only). - Sanitization: The skill implements logical validation by checking rates against seasonality-matched baselines and entrant volumes.
Audit Metadata