posthog-automation

Warn

Audited by Socket on Apr 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's core capability matches its PostHog automation purpose, but the trust and data-flow model is weaker than presented. The main concern is misleading setup language and routing PostHog auth/data through Composio/Rube despite an available first-party PostHog MCP, creating medium security risk without clear evidence of malware.

Confidence: 85%Severity: 62%
Audit Metadata
Analyzed At
Apr 1, 2026, 07:29 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fantigravity-awesome-skills%2Fposthog-automation%2F@60ae4adb5c27a8eb578e04573dd4e48b6e3ef46e