MCP Development
coollabsio/coolify
A skill your agent uses for Laravel MCP development. An agent skill from coollabsio/coolify.
A skill your agent uses when deciding whether an endpoint, settings section, or UI flow should require recent authentication (re-auth), when adding TimeSensitiveActionPermission or its exemptions…
Install Gating Sensitive Actions
$ npx skills add PostHog/posthog --skill gating-sensitive-actions -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install PostHog/posthog gating-sensitive-actions --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/gating-sensitive-actions .claude/skills/gating-sensitive-actions && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "gating-sensitive-actions" agent skill from https://github.com/PostHog/posthog/tree/master/.agents/skills/gating-sensitive-actions into .claude/skills/gating-sensitive-actions/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gating-sensitive-actions", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/PostHog/posthog/tree/master/.agents/skills/gating-sensitive-actionsType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add PostHog/posthog --skill gating-sensitive-actions -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install PostHog/posthog gating-sensitive-actions --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/gating-sensitive-actions .agents/skills/gating-sensitive-actions && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "gating-sensitive-actions" agent skill from https://github.com/PostHog/posthog/tree/master/.agents/skills/gating-sensitive-actions into .agents/skills/gating-sensitive-actions/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gating-sensitive-actions", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add PostHog/posthog --skill gating-sensitive-actions -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install PostHog/posthog gating-sensitive-actions --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/gating-sensitive-actions .cursor/skills/gating-sensitive-actions && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "gating-sensitive-actions" agent skill from https://github.com/PostHog/posthog/tree/master/.agents/skills/gating-sensitive-actions into .cursor/skills/gating-sensitive-actions/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gating-sensitive-actions", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/PostHog/posthog.git --path .agents/skills/gating-sensitive-actions--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add PostHog/posthog --skill gating-sensitive-actions -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install PostHog/posthog gating-sensitive-actions --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/gating-sensitive-actions .gemini/skills/gating-sensitive-actions && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "gating-sensitive-actions" agent skill from https://github.com/PostHog/posthog/tree/master/.agents/skills/gating-sensitive-actions into .gemini/skills/gating-sensitive-actions/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gating-sensitive-actions", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install PostHog/posthog gating-sensitive-actionsInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add PostHog/posthog --skill gating-sensitive-actions -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/gating-sensitive-actions .github/skills/gating-sensitive-actions && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "gating-sensitive-actions" agent skill from https://github.com/PostHog/posthog/tree/master/.agents/skills/gating-sensitive-actions into .github/skills/gating-sensitive-actions/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gating-sensitive-actions", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add PostHog/posthog --skill gating-sensitive-actions -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install PostHog/posthog gating-sensitive-actions --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/gating-sensitive-actions .opencode/skills/gating-sensitive-actions && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "gating-sensitive-actions" agent skill from https://github.com/PostHog/posthog/tree/master/.agents/skills/gating-sensitive-actions into .opencode/skills/gating-sensitive-actions/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gating-sensitive-actions", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
gating-sensitive-actions- GitHub stars
- 40k
- Token cost
- ~2.3k tokens
- SKILL.md length
- 1,070 words
- Files
- 1
- Skills in repo
- 252
- Repo updated
- First seen
- Licence
- Custom licence
At a glance
A skill your agent uses when deciding whether an endpoint, settings section, or UI flow should require recent authentication (re-auth), when adding TimeSensitiveActionPermission or its exemptions…
- Works in 6 steps: Reads stay open. Opening a page or… → The backend enforces the gate. A… → The frontend reacts, and does not gate… → …
- Deciding whether an endpoint
- SKILL.md covers The decision, What counts as sensitive, Backend: adding the gate and Frontend: what happens on a…, plus 2 more sections
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Gating Sensitive Actions is an agent skill from PostHog/posthog, published by the product's own GitHub organization. Use when deciding whether an endpoint, settings section, or UI flow should require recent authentication (re-auth), when adding TimeSensitiveActionPermission or its exemptions (timesensitiveallowifonlyfields, timesensitiveexcludeactions, timesensitiveallowactions), when wrapping a page or settings section in TimeSensitiveAuthenticationArea, when an API read returns secret material, or when a write fails with sensitiveactionrequiredreauth. Carries the product decision: reads stay open, only sensitive writes need a…
Its SKILL.md is about 2.3k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Frontend & Design. The repository describes itself as: :hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools – AI observability, analytics, session replay, flags, experiments, error…
When your agent uses it
- Deciding whether an endpoint
- Settings section
- UI flow should require recent authentication (re-auth)
- Adding TimeSensitiveActionPermission
Example prompts
- “/gating-sensitive-actions”
Workflow steps
6 steps, taken from the first numbered list in SKILL.md.
- Reads stay open. Opening a page or loading a list never asks for re-auth. Only an action that changes something sensitive does.
- The backend enforces the gate. A frontend-only gate protects nothing, because anyone with the cookie can call the API directly. If an…
- The frontend reacts, and does not gate up front. A write that fails with sensitive_action_required_reauth opens the re-auth modal. After…
- Organization settings are the exception. The whole organization level of settings is wrapped in TimeSensitiveAuthenticationArea, so it…
- User, project, and environment settings never prompt on navigation. There is no per-section opt-in. If reading a section feels sensitive…
- A GET never returns a live secret that already exists. Return a secret only in the response that creates it: new personal API keys, rolled…
What it can do on your machine
Read from SKILL.md and the folder at commit 10f9ad7. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Gating Sensitive Actions loads about 2.3k tokens when it runs. Until then it costs about 248 tokens; SKILL.md has 1,070 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: notes
The automated check noted patterns worth knowing about, such as sudo or a known installer.
- NoteRuns commands with sudoSKILL.md:3
ation, sensitive session, fresh session, sudo mode, step-up, TimeSensitiveActionPermission, TimeSensitiveAuthenticationA
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 1,070 words (~2,258 tokens).
“A session cookie that is older than SESSION_SENSITIVE_ACTIONS_AGE (2 hours by default) can still read everything, but it cannot do sensitive writes until the user re-authenticates. This skill says which writes count as sensitive, where the gate goes, and how…”
- name
- gating-sensitive-actions
Files
Just SKILL.md in .agents/skills/gating-sensitive-actions of PostHog/posthog.
Open the folder on GitHubat commit 10f9ad7
Used in 1 other repository
We found 1 copy of this SKILL.md (exact, near-identical or edited) in other folders. This page covers the copy in PostHog/posthog, which our catalogue first saw on October 7, 2026.
Compare with similar skills
Gating Sensitive Actions next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Gating Sensitive Actions this skillPostHog/posthog | 40k | — | ~2.3k | Automated safety check: Notes | Custom licence | |
| MCP Developmentcoollabsio/coolify | 63k | 1 repos | ~949 | Automated safety check: Pass | MIT | |
| Turnstile Spincloudflare/skills | 3k | 4 repos | ~7.2k | Automated safety check: Notes | Apache-2.0 | |
| Paperclip Pagepaperclipai/paperclip | 99k | — | ~1k | Automated safety check: Pass | MIT | |
| Go HTML Views with Gomponentsmaragudk/gomponents | 1.9k | — | ~3.6k | Automated safety check: Pass | MIT | |
| Pinmeglitternetwork/pinme | 3.7k | — | ~3.8k | Automated safety check: Notes | MIT |
Similar skills
- Official
Turnstile Spin
cloudflare/skills
Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.
Paperclip Page
paperclipai/paperclip
Publish static HTML pages and asset folders to the Paperclip S3/CloudFront page host.
Go HTML Views with Gomponents
maragudk/gomponents
Builds and edits HTML views in Go with gomponents, where components are plain functions that return a Node, instead of using template languages.
Pinme
glitternetwork/pinme
A skill your agent uses when the user mentions "pinme", or needs to upload files, store to IPFS, create/publish/deploy websites or full-stack services (including frontend pages, backend APIs…
App Feedback Admin
Jamailar/Beav
Read platform-admin feedback issues through the trusted HTTP admin API, summarize user reports, and turn them into RedBox/RedConvert repair and iteration plans.
More from PostHog/posthog
All 252 skills in this repo- Official
Authoring Log Alerts
PostHog/posthog
Author useful, low-noise log alerts on services in a PostHog project.
- Official
Autoresolving PR Conflicts
PostHog/posthog
Operating procedure for the conflict-autoresolver agent: sweep open PostHog/posthog PRs that conflict with master, resolve the trivial conflicts (generated artifacts deterministically, source…
- Official
Diagnosing Stacktrace Symbolication
PostHog/posthog
Help users debug PostHog Error Tracking stack-trace symbolication for any supported platform — JavaScript/TypeScript web, React Native (Hermes), Android (Proguard / R8), or iOS / macOS (dSYM).
- Official
Exploring Apm Traces
PostHog/posthog
Investigates distributed application performance using PostHog APM (OpenTelemetry span) data via MCP.
- Official
Exploring LLM Traces
PostHog/posthog
Debug and inspect LLM/AI agent traces using PostHog's MCP tools.
- Official
Investigate Metric
PostHog/posthog
Diagnose why a product metric changed (dropped, spiked, or plateaued) by orchestrating breakdowns, actors, paths, lifecycle, retention, and annotations queries.
Related
Categories
Questions about Gating Sensitive Actions
What does Gating Sensitive Actions do?
A skill your agent uses when deciding whether an endpoint, settings section, or UI flow should require recent authentication (re-auth), when adding TimeSensitiveActionPermission or its exemptions…. Gating Sensitive Actions is an agent skill from PostHog/posthog, published by the product's own GitHub organization. Use when deciding whether an endpoint, settings section, or UI flow should require recent authentication (re-auth), when adding TimeSensitiveActionPermission or its exemptions (timesensitiveallowifonlyfields, timesensitiveexcludeactions, timesensitiveallowactions), when wrapping a page or settings section in TimeSensitiveAuthenticationArea, when an API read returns secret material, or when a write fails with sensitiveactionrequiredreauth.
When should I use Gating Sensitive Actions?
Gating Sensitive Actions fits situations like: deciding whether an endpoint; settings section; UI flow should require recent authentication (re-auth); adding TimeSensitiveActionPermission.
How do I install Gating Sensitive Actions in Claude Code?
Run `npx skills add PostHog/posthog --skill gating-sensitive-actions -a claude-code`. Or copy the skill folder (.agents/skills/gating-sensitive-actions in PostHog/posthog) into .claude/skills/gating-sensitive-actions in your project. Claude Code loads it when a task matches its description.
How do I install Gating Sensitive Actions in Codex?
Run `npx skills add PostHog/posthog --skill gating-sensitive-actions -a codex`. Or copy the skill folder (.agents/skills/gating-sensitive-actions in PostHog/posthog) into .agents/skills/gating-sensitive-actions in your project. Codex loads it when a task matches its description.
Can I use Gating Sensitive Actions in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add PostHog/posthog --skill gating-sensitive-actions -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/gating-sensitive-actions, .gemini/skills/gating-sensitive-actions, .github/skills/gating-sensitive-actions and .opencode/skills/gating-sensitive-actions in your project.
What does Gating Sensitive Actions need to run?
SKILL.md names no scripts, command-line tools or credentials: Gating Sensitive Actions is instructions for the agent only.
Does Gating Sensitive Actions access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Gating Sensitive Actions safe to install?
Our automated static check of SKILL.md found notes only (runs commands with sudo), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.
What licence does Gating Sensitive Actions use?
Gating Sensitive Actions has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.
How many tokens does Gating Sensitive Actions use?
About 2.3k tokens (SKILL.md is roughly 9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Gating Sensitive Actions?
Skills that share tags, products or a category with Gating Sensitive Actions: MCP Development (coollabsio/coolify, 63k stars), Turnstile Spin (cloudflare/skills, 3k stars), Paperclip Page (paperclipai/paperclip, 99k stars) and Go HTML Views with Gomponents (maragudk/gomponents, 1.9k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Gating Sensitive Actions?
PostHog (a GitHub organization, an official publisher) maintains it in PostHog/posthog, which has 40,182 GitHub stars. The repository holds 252 skills in this directory. The repository was last updated on October 8, 2026.
Source: PostHog/posthog on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.