Skip to main content

posthog-deploy-integration

Facilitates deployment of PostHog integrations on Vercel, Fly.io, and Cloud Run, ensuring secure configuration and management.

Install this skill

or
80/100

Security score

The posthog-deploy-integration skill was audited on Feb 28, 2026 and we found 12 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 98

Template literal with variable interpolation in command context

SourceSKILL.md
98```bash
low line 32

Webhook reference - potential data exfiltration

SourceSKILL.md
32vercel secrets add posthog_webhook_secret whsec_***
low line 79

Webhook reference - potential data exfiltration

SourceSKILL.md
79fly secrets set POSTHOG_WEBHOOK_SECRET=whsec_***
low line 125

Webhook reference - potential data exfiltration

SourceSKILL.md
125webhookSecret?: string;
low line 134

Webhook reference - potential data exfiltration

SourceSKILL.md
134webhookSecret: process.env.POSTHOG_WEBHOOK_SECRET,
medium line 209

Webhook reference - potential data exfiltration

SourceSKILL.md
209For webhook handling, see `posthog-webhooks-events`.
low line 129

Access to .env file

SourceSKILL.md
129const env = process.env.NODE_ENV || 'development';
low line 132

Access to .env file

SourceSKILL.md
132apiKey: process.env.POSTHOG_API_KEY!,
low line 134

Access to .env file

SourceSKILL.md
134webhookSecret: process.env.POSTHOG_WEBHOOK_SECRET,
low line 203

External URL reference

SourceSKILL.md
203- [Vercel Documentation](https://vercel.com/docs)
low line 204

External URL reference

SourceSKILL.md
204- [Fly.io Documentation](https://fly.io/docs)
low line 205

External URL reference

SourceSKILL.md
205- [Cloud Run Documentation](https://cloud.google.com/run/docs)
Scanned on Feb 28, 2026
View Security Dashboard
Installation guide →