posthog-automation
Warn
Audited by Socket on Apr 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's core capability matches its PostHog automation purpose, but the trust and data-flow model is weaker than presented. The main concern is misleading setup language and routing PostHog auth/data through Composio/Rube despite an available first-party PostHog MCP, creating medium security risk without clear evidence of malware.
Confidence: 85%Severity: 62%
Audit Metadata