Scanned skills

posthog/ai-plugin instrument-feature-flags

Checked the catalogued skill at instrument-feature-flags.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 41
D Security

D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

F Permissions

F set by findings not listed

B Transparency

B set by findings not listed in the stored summary

showing 10 of 41
securityhigh SD-022
SKILL.md
securityhigh SD-022
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
8 suppressed by AI triage
securityhigh SD-007 benign_example
references/api.md

The file is documentation describing outbound network call patterns, not an executed call or configuration enabling such calls.

securityhigh SD-022 benign_example
references/django.md

The content is a documentation note, not executable code or configuration that could perform DNS exfiltration.

securityhigh SD-022 benign_example
references/dotnet.md

The content is a documentation note, not executable code or configuration that could perform DNS exfiltration.

securityhigh SD-022 benign_example
references/dotnet.md

Documentation file contains no executable or configuration code indicating DNS exfiltration.

securityhigh SD-022 benign_example
references/flask.md

The content is a documentation note, not executable code or configuration that could perform DNS exfiltration.

securityhigh SD-022 benign_example
references/next-js.md

The content is a documentation note, not executable code or configuration that could perform DNS exfiltration.

permission_hygienehigh SD-003 benign_example
references/next-js.md

The flagged line contains only empty lines and no traversal or absolute path patterns.

securityhigh SD-022 benign_example
references/usage.md

The content is a documentation note, not executable code or configuration that could perform DNS exfiltration.