OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Mar 28, 2026
Independent checks from skills.sh's audit partners.
The skill is a legitimate tool for integrating PostHog into Ruby on Rails applications. It follows best practices for secret management and uses official vendor libraries and CDNs. Analysis found a dummy secret in a development example and an indirect prompt injection surface common to integration tools, but no malicious patterns were detected.
Detected behaviors
No alerts
No issues