analytics-product
Fail
Audited by Socket on Mar 7, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The Analytics-Product skill exhibits coherent alignment between its stated purpose (instrumenting product analytics with PostHog, funnels, cohorts, retention, dashboards) and its capabilities (Python-based PostHog integration, event tracking, identify traits, simple analysis helpers). There are no evident malicious or overly broad permissions. Data flows are directed to official analytics endpoints, and credentials are sourced from environment variables in a standard pattern. Overall, the footprint is benign and proportionate to the stated analytics domain, with minor caveats around secret management and user consent best practices for production deployments.
Confidence: 98%
Audit Metadata