Scanned skills

posthog/skills instrument-feature-flags

Checked the catalogued skill at instrument-feature-flags.

SkillTrust corpus scan 3 October 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 37
D Security

D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

F Permissions

F set by findings not listed

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 37
securityhigh SD-022
SKILL.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
securityhigh SD-007
references/adding-feature-flag-code.md
transparencymedium SD-007
references/adding-feature-flag-code.md
4 suppressed by AI triage
transparencymedium SD-007 benign_example
references/api.md

File is prose; outbound call patterns are mentioned as examples, not real network calls.

securityhigh SD-022 benign_example
references/dotnet.md

The file is a documentation prose that only describes DNS exfiltration concepts, not an actual implementation.

securityhigh SD-022 benign_example
references/laravel.md

Normal .env configuration, no dynamic DNS or tunneling evidence.

securitymedium SD-008 benign_example
references/laravel.md

No base64 content present in the shown snippet; likely false positive.