OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Apr 7, 2026
Independent checks from skills.sh's audit partners.
The skill is designed to analyze PostHog session recordings for experiment variants. It retrieves data from internal system tables and processes session metadata. A low-risk vulnerability surface for indirect prompt injection exists because the skill processes untrusted data from session recordings, such as console logs and URLs.
Detected behaviors
No alerts
No issues