diagnosing-stacktrace-symbolication
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for debugging PostHog symbolication pipelines across multiple platforms (JavaScript, Android, iOS). It utilizes official vendor tools such as the posthog-cli and dedicated MCP tools for project management.
- [SAFE]: The Python script
scripts/inspect_sourcemaps.pyperforms static analysis on local JavaScript and source map files. It extracts metadata like chunk IDs and mapping lengths for diagnostic summaries. The script contains no network operations, subprocess executions, or dynamic code evaluation. - [SAFE]: All identified dependencies, including Node.js packages and CLI tools, are official resources managed by the vendor (PostHog). The skill instructions for package installation and configuration inspection use standard, safe commands.
- [SAFE]: The skill includes explicit instructions for handling sensitive data, such as advising against echoing presigned URLs unless requested by the user, and utilizing standard environment variables for authentication.
Audit Metadata