qa-frontend
What this skill does
Internal PostHog developer frontend/browser QA skill. Used for testing frontend changes against a local PostHog stack, running in PR or local mode, and capturing evidence of test results.
github/posthog - Dependency Usage - 37.6k stars
Threat analysis
Skill info
pkg:github/PostHog/posthog@d885c87?skill=qa-frontendAssessments (1)
Dependency Usage
Dependency Usage via local-llm-review
scripts/annotate-evidence.py
The script uses ``subprocess.run`` with ``ffmpeg_args`` to execute ``ffmpeg`` for video transcoding. This is a legitimate use case for the tool, as it is used to convert recorded demo-pass sessions inBadge
Add the Anomity scan badge for qa-frontend to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of qa-frontend? Report an issue or request a rescan.
