querying-posthog-data

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
references/example-llm-trace.md

The code is a legitimate-looking trace aggregation SQL query and contains no direct malicious behavior. It poses a data-minimization and privacy risk because it returns full AI inputs, outputs, conversation/application state, tool data, and properties, potentially exposing sensitive information. The broad timestamp range conflicts with the stated narrow trace-query guidance. Restrict heavy fields, use parameterized trace and time values, and export large results securely rather than displaying them directly.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 14, 2026, 10:27 PM
Package URL
pkg:socket/skills-sh/posthog%2Fskills%2Fquerying-posthog-data%2F@d62a332bc5bcba21bdadef0d2be5350063a9c7984f07fbc4eb459453e65df5df
Security Audit — socket — querying-posthog-data