adding-framework-support
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and structural templates for modifying the PostHog wizard codebase. No evidence of prompt injection, data exfiltration, or malicious persistence was found.
- [COMMAND_EXECUTION]: The skill references standard development commands (
pnpm build,pnpm test,pnpm fix) for code verification. These are routine operations within a software development environment. - [INDIRECT_PROMPT_INJECTION]: The instructions describe a system that ingests untrusted local project data (such as
package.json,requirements.txt, andGemfile) to detect software frameworks. While this represents a data ingestion surface, the skill is a developer guide and does not contain or encourage malicious interpolation or safety bypasses.
Audit Metadata