posthog-automation
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to configure a remote MCP server endpoint at
https://rube.app/mcp. This endpoint is required to provide the tool definitions and functionality for interacting with the PostHog API. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from PostHog, which could theoretically contain malicious instructions if the source data is compromised.
- Ingestion points:
POSTHOG_LIST_AND_FILTER_PROJECT_EVENTSandPOSTHOG_RETRIEVE_FEATURE_FLAG_DETAILSare used to pull data from PostHog into the agent context. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands in the retrieved data.
- Capability inventory: The skill's capabilities are restricted to the PostHog API toolkit provided by the Rube MCP server.
- Sanitization: No explicit sanitization or validation of the retrieved analytics data is described in the prompt instructions.
Audit Metadata