Gen Agent Trust Hub

instrument-product-analytics · posthog/ai-plugin

Passed

Provider summary

This skill automates the integration of PostHog product analytics into various software projects. It analyzes a codebase to identify its framework, installs the appropriate PostHog SDK, and implements event tracking, user identification, and error tracking. The skill follows industry standards for analytics implementation and originates from a verified vendor (PostHog). Potential risks are limited to the ingestion of codebase files, which could serve as a vector for indirect prompt injection, and the execution of scripts (like linters) defined within the target project's configuration.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.

Interpretation

Compare the repository, publisher, and installation command before continuing.

Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.

Use the narrowest possible scope and avoid broad credentials for third-party skills.