posthog/skills instrument-integration
Checked the catalogued skill at instrument-integration.
F; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →
F; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
B set by findings not listed in the stored summary
11 suppressed by AI triage
Documentation example, not malicious usage
Documentation example, not malicious usage
The fetch call targets a local API endpoint, not an external host, so it is not a real threat.
The fetch call targets an internal relative endpoint '/api/auth/login', not an external host, so it does not represent an outbound network call that could exfiltrate data.
The code is part of documentation and simply demonstrates relative imports, not an executable path traversal attack.
Relative import of environment config is normal, not a malicious path traversal.
Documentation note, no evidence of malicious DNS tunneling
Dynamic import of a local JSON file using a relative path is normal and does not read or write outside the project directory.
The snippet instructs adding environment variables; there is no dynamic DNS lookup or tunneling.
The snippet instructs adding environment variables; there is no dynamic DNS lookup or tunneling.
The snippet instructs adding environment variables; there is no dynamic DNS lookup or tunneling.