PostHog Query

• Verdict: Pass
• Confidence: High
• Analyzed: Feb 19, 2026, 11:06 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requirements and runtime instructions match its stated purpose (running HogQL via the PostHog CLI); it asks for the CLI and uses the CLI's local credentials file for a read-only query scope, which is proportionate.

This skill is coherent for running PostHog queries, but before installing or using it: (1) ensure you have or will install the official posthog-cli from a trusted source (SKILL.md suggests npm install -g posthog-cli); (2) create/use an API key limited to query:read (least privilege) and be aware the CLI stores the token at ~/.posthog/credentials.json — protect that file; (3) confirm any query results you run do not contain sensitive data you don't want an agent to see or forward; and (4) if you do not want the agent to call this skill autonomously, disable autonomous invocation in your agent settings. If anything about the package source or CLI provenance is unclear, verify upstream documentation or the npm package before global installation.