Security audit
pontx-posthog
Security checks for vulnerabilities and agentic risk
Overview
This skill is a narrowly scoped PostHog integration guide that emphasizes local token handling, previews, and explicit user confirmation before sending analytics or feature-flag requests.
Install only if you intend to use PostHog runtime APIs. Keep project tokens in local environment variables or client options, review previews carefully, and confirm only requests that target the intended PostHog project and environment.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.