api-analytics-posthog-analytics

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents the use of PostHog, an established analytics provider. Network requests are directed to official endpoints (such as us.i.posthog.com) or local proxies for ingestion.
  • [SAFE]: Strong emphasis is placed on PII protection, with explicit critical requirements against storing emails, names, or phone numbers in event properties.
  • [SAFE]: Implementation patterns for GDPR compliance, such as consent banners and cookieless tracking modes, are correctly described and follow privacy best practices.
  • [SAFE]: Authentication flow integration (identify/reset) is handled correctly to prevent cross-contamination of user data and ensure data isolation between sessions.
  • [SAFE]: The skill uses environment variables (process.env.POSTHOG_KEY) for secret management, avoiding hardcoded credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 03:56 PM
Security Audit — agent-trust-hub — api-analytics-posthog-analytics