api-analytics-setup-posthog
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install and use
posthog-jsandposthog-node. These are official, well-known libraries for PostHog analytics. References to external documentation point exclusively to the official posthog.com domain. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for ingesting user data (e.g., email, name, plan type) into the analytics stream.
- Ingestion points:
usePostHogIdentifyhook inexamples/core.mdand thehandleSignupAPI route inexamples/server.mdboth ingest external user properties. - Boundary markers: No specific boundary markers are used in the prompt templates, but data is handled via structured SDK methods.
- Capability inventory: The skill enables network transmission of telemetry data to PostHog endpoints.
- Sanitization: The provided examples follow standard JavaScript practices but do not include explicit input sanitization, which is expected for a setup-focused skill. The surface area is consistent with the primary purpose of analytics instrumentation.
Audit Metadata