posthog-webhooks-events
Warn
Audited by Snyk on Mar 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill accepts and parses incoming webhook POSTs at /webhooks/posthog (req.body) and passes that untrusted, potentially user-generated JSON to handlePostHogEvent (and the examples even show using webhook.site/ngrok), so third-party payloads can influence event handling and subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata