OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Mar 28, 2026
Independent checks from skills.sh's audit partners.
The skill provides a legitimate workflow for integrating PostHog analytics into Laravel applications. It includes instructions for the agent to analyze project files, identify tracking opportunities, and implement the SDK. A minor risk of indirect prompt injection exists as the agent processes user-provided source code without explicit sanitization. The skill follows security best practices by using environment variables for sensitive configuration.
Detected behaviors
No alerts
No issues