Make your PostHog data actionable, understandable, and dead simple to use. Point it at your project and get a ranked diagnosis of your product in 30 seconds. Built by Dizko Labs.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio counts 11 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
check_instrumentation_drift
-
diagnose_analytics
-
explain_product
-
get_event_definitions
-
get_tracking_plan
-
list_dashboards
-
preview_event_descriptions
-
propose_role_mapping
-
query_analytics
-
save_role_mapping
-
set_goal
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 8eeb5d4 · analyzer v33 · 4w ago
skills & prompt files 1
danger signals20
- suspicious endpoint us.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/src/doctor/index.ts :156
const ingestHost = context.config?.posthog.ingestHost ?? 'https://us.i.posthog.com' - suspicious endpoint us-assets.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/src/doctor/index.ts :157
const assetHost = context.config?.posthog.assetHost ?? 'https://us-assets.i.posthog.com' - suspicious endpoint us.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :279
host: 'https://us.posthog.com', - suspicious endpoint us.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :280
ingestHost: 'https://us.i.posthog.com', - suspicious endpoint us-assets.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :281
assetHost: 'https://us-assets.i.posthog.com', - suspicious endpoint us.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/src/posthog/client.ts :29
host: 'https://us.posthog.com', - suspicious endpoint us.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/src/posthog/client.ts :30
ingestHost: 'https://us.i.posthog.com', - suspicious endpoint us-assets.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/src/posthog/client.ts :31
assetHost: 'https://us-assets.i.posthog.com', - suspicious endpoint eu.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/src/posthog/client.ts :34
host: 'https://eu.posthog.com', - suspicious endpoint eu.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/src/posthog/client.ts :35
ingestHost: 'https://eu.i.posthog.com', - suspicious endpoint eu-assets.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/src/posthog/client.ts :36
assetHost: 'https://eu-assets.i.posthog.com', - suspicious endpoint us.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/tests/doctor.test.ts :21
host: 'https://us.posthog.com', - suspicious endpoint us.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/tests/doctor.test.ts :22
ingestHost: 'https://us.i.posthog.com', - suspicious endpoint us-assets.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/tests/doctor.test.ts :23
assetHost: 'https://us-assets.i.posthog.com', - suspicious endpoint us.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/tests/emit.test.ts :33
ingestHost: 'https://us.i.posthog.com', - suspicious endpoint us.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/tests/emit.test.ts :166
url: 'https://us.posthog.com/project/1/dashboard/7', - suspicious endpoint us.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/tests/fixtures.ts :101
"default-src 'self'; script-src 'self'; connect-src 'self' https://us.i.posthog.com", - suspicious endpoint us.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/tests/mcp.test.ts :57
host: 'https://us.posthog.com', - suspicious endpoint us.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/tests/mcp.test.ts :58
ingestHost: 'https://us.i.posthog.com', - suspicious endpoint us-assets.i.posthog.com (telemetry) ZakKrevitt-OpenHog-8eeb5d4/tests/mcp.test.ts :59
assetHost: 'https://us-assets.i.posthog.com',
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 75
filesystem 6
- fs ZakKrevitt-OpenHog-8eeb5d4/src/posthog/auth.ts :15
import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs' - fs ZakKrevitt-OpenHog-8eeb5d4/src/util/fs.ts :10
import { readdirSync, readFileSync, statSync, existsSync, mkdirSync, writeFileSync } from 'node:fs' - fs (weak) ZakKrevitt-OpenHog-8eeb5d4/tests/cli.integration.test.ts :11
import { existsSync, readFileSync } from 'node:fs' - fs (weak) ZakKrevitt-OpenHog-8eeb5d4/tests/describe.test.ts :9
import { existsSync, readFileSync } from 'node:fs' - fs (weak) ZakKrevitt-OpenHog-8eeb5d4/tests/fixtures.ts :10
import { mkdtempSync, rmSync } from 'node:fs' - fs (weak) ZakKrevitt-OpenHog-8eeb5d4/tests/mcp.test.ts :11
import { existsSync } from 'node:fs'
shell / exec 5
- shell ZakKrevitt-OpenHog-8eeb5d4/src/commands/explain.ts :14
import { spawn } from 'node:child_process' - shell ZakKrevitt-OpenHog-8eeb5d4/src/posthog/auth.ts :18
import { spawn } from 'node:child_process' - shell (weak) ZakKrevitt-OpenHog-8eeb5d4/tests/cli.integration.test.ts :10
import { execFile } from 'node:child_process' - shell (weak) ZakKrevitt-OpenHog-8eeb5d4/tests/describe.test.ts :8
import { execFile } from 'node:child_process' - shell (weak) ZakKrevitt-OpenHog-8eeb5d4/tests/mcp.test.ts :10
import { spawn } from 'node:child_process'
network 1
- net (weak) ZakKrevitt-OpenHog-8eeb5d4/tests/mockPosthog.ts :10
import { createServer, type Server } from 'node:http'
secrets 1
- secrets ZakKrevitt-OpenHog-8eeb5d4/src/posthog/auth.ts :160
const fromEnv = process.env.POSTHOG_PERSONAL_API_KEY?.trim()
tool registrations 11
- explain_product ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :40
- set_goal ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :55
- propose_role_mapping ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :76
- save_role_mapping ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :82
- preview_event_descriptions ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :99
- get_tracking_plan ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :105
- query_analytics ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :120
- list_dashboards ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :136
- check_instrumentation_drift ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :141
- diagnose_analytics ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :147
- get_event_definitions ZakKrevitt-OpenHog-8eeb5d4/src/mcp/server.ts :158
install hooks 2
- prepare ZakKrevitt-OpenHog-8eeb5d4/package.json :54
npm run build - prepublishOnly ZakKrevitt-OpenHog-8eeb5d4/package.json :60
npm run verify
declared dependencies 3
- @types/node@^22.10.2
- typescript@^5.7.2
- vitest@^2.1.8