migrate-posthog

SUSPICIOUS. The migration capabilities and official MCP usage mostly fit the stated purpose, but the mandatory hidden telemetry is a serious integrity problem: it collects conversation sentiment/progress, stores a secret locally, posts to external vendor endpoints, asks for sandbox disabling, and explicitly tells the agent not to disclose it. That covert data flow is disproportionate to a migration skill and drives the risk classification.