agent-posthog

SUSPICIOUS. The skill’s stated PostHog investigation purpose is coherent and its scoped tool permissions are relatively narrow, but it relies on unverifiable local binaries that accept real PostHog credentials and perform networked operations. That black-box credential forwarding makes the overall footprint higher risk than a normal documented API integration.