skills/rohitg00/buildwithclaude/posthog-automation/Socket

posthog-automation

Warn

Audited by Socket on Jul 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's purpose is coherent, but its data flow is routed through a third-party MCP/Composio layer rather than official PostHog APIs, and the setup claims are looser than the vendor's documented MCP auth/scoping model. This looks more like an intermediary integration skill than a direct PostHog automation skill, creating medium risk from delegated credentials and remote tool trust rather than confirmed malware.

Confidence: 84%Severity: 64%

Audit Metadata

Analyzed At

Jul 18, 2026, 04:25 PM

Package URL

pkg:socket/skills-sh/rohitg00%2Fbuildwithclaude%2Fposthog-automation%2F@09fa0fb9e63988fa21c685ba7483dbe29ad3e4dbd85c8605805b8a26247d9659