posthog-analytics
Enables product analytics with PostHog for event tracking, user identification, and custom dashboards to drive informed decisions.
Install this skill
Security score
The posthog-analytics skill was audited on Feb 12, 2026 and we found 21 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 83 | url += `?${searchParams.toString()}`; |
Access to .env file
| 44 | posthog.init(process.env.NEXT_PUBLIC_POSTHOG_KEY!, { |
Access to .env file
| 45 | api_host: process.env.NEXT_PUBLIC_POSTHOG_HOST || 'https://us.i.posthog.com', |
Access to .env file
| 50 | if (process.env.NODE_ENV === 'development') { |
Access to .env file
| 116 | posthog.init(import.meta.env.VITE_POSTHOG_KEY, { |
Access to .env file
| 117 | api_host: import.meta.env.VITE_POSTHOG_HOST || 'https://us.i.posthog.com', |
Access to .env file
| 178 | const posthog = new PostHog(process.env.POSTHOG_API_KEY!, { |
Access to .env file
| 179 | host: process.env.POSTHOG_HOST || 'https://us.i.posthog.com', |
Access to .env file
| 209 | # .env.local (Next.js) - SAFE: These are meant to be public |
Access to .env file
| 213 | # .env (Backend) - Keep private |
Access to .env file
| 497 | const posthog = new PostHog(process.env.POSTHOG_API_KEY!); |
Access to .env file
| 817 | if (process.env.NODE_ENV === 'development') { |
Access to .env file
| 872 | if (process.env.NODE_ENV === 'development') { |
Access to .env file
| 886 | if (process.env.NODE_ENV === 'development') { |
External URL reference
| 12 | **Sources:** [PostHog Docs](https://posthog.com/docs) | [Product Analytics](https://posthog.com/docs/product-analytics) | [Feature Flags](https://posthog.com/docs/feature-flags) |
External URL reference
| 45 | api_host: process.env.NEXT_PUBLIC_POSTHOG_HOST || 'https://us.i.posthog.com', |
External URL reference
| 117 | api_host: import.meta.env.VITE_POSTHOG_HOST || 'https://us.i.posthog.com', |
External URL reference
| 150 | posthog.host = os.environ.get("POSTHOG_HOST", "https://us.i.posthog.com") |
External URL reference
| 179 | host: process.env.POSTHOG_HOST || 'https://us.i.posthog.com', |
External URL reference
| 211 | NEXT_PUBLIC_POSTHOG_HOST=https://us.i.posthog.com |
External URL reference
| 215 | POSTHOG_HOST=https://us.i.posthog.com |