Official agent skill

Signals Scout Anomaly Detection

by PostHog in PostHog/posthog

Signals scout that watches the project's most-viewed dashboards and insights for anomalies — bursts, drops, flat-lines, and trend breaks — against each insight's own seasonality-matched baseline.

OfficialCustom licenceAuto-check passedData & Analytics

Install Signals Scout Anomaly Detection

skills CLI
$ npx skills add PostHog/posthog --skill signals-scout-anomaly-detection -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install PostHog/posthog signals-scout-anomaly-detection --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .claude/skills && cp -r skills-src/products/signals/skills/signals-scout-anomaly-detection .claude/skills/signals-scout-anomaly-detection && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
signals-scout-anomaly-detection
GitHub stars
40k
Token cost
~4.6k tokens
SKILL.md length
2,291 words
Files
5 (incl. scripts, references)
Skills in repo
254
Repo updated
First seen
Licence
Custom licence

At a glance

Signals scout that watches the project's most-viewed dashboards and insights for anomalies — bursts, drops, flat-lines, and trend breaks — against each insight's own seasonality-matched baseline.

  • Tasks that involve Anomaly detection
  • SKILL.md covers Quick close-out: is anything…, How a run works, Disqualifiers (skip these) and MCP tools, plus 1 more section
  • Runs Python scripts from its folder
  • Tasks that involve Forecasting and time series

What it does

Signals Scout Anomaly Detection is an agent skill from PostHog/posthog, published by the product's own GitHub organization. Signals scout that watches the project's most-viewed dashboards and insights for anomalies — bursts, drops, flat-lines, and trend breaks — against each insight's own seasonality-matched baseline.

Its SKILL.md is about 4.6k tokens, which your agent loads only when the skill is triggered. The skill folder holds 6 other files, including scripts and reference files (for example `references/anomaly-methods.md`, `references/report-contract.md` and `references/watchlist-and-memory.md`). Compatibility notes: Runs as the PostHog Signals scout in a Claude sandbox with read-only analytics scopes plus signalscoutinternal:write (scratchpad), signalscoutreport:write…

It sits in Data & Analytics, covering Anomaly detection and Forecasting and time series. The repository describes itself as: :hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools – AI observability, analytics, session replay, flags, experiments, error…

When your agent uses it

  • Tasks that involve Anomaly detection
  • Tasks that involve Forecasting and time series

Example prompts

  • “Use the signals-scout-anomaly-detection skill to signal scout that watches the project's most-viewed dashboards and insights for anomalies — bursts…”
  • “/signals-scout-anomaly-detection”

Requirements

  • Python 3
  • Compatibility (from SKILL.md): Runs as the PostHog Signals scout in a Claude sandbox with read-only analytics scopes plus signal_scout_internal:write (scratchpad), signal_scout_report:write (the report channel — emit_report / edit_report), and notebook:write (the notebook write-up behind each report). Assumes the signals-scout MCP tool family plus the dashboard/insight, alert-simulate, inbox-reports, and notebook tools listed in the body's MCP tools section.

What it can do on your machine

Read from SKILL.md and the folder at commit c012c8d. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 1 file in scripts/ (Python), which the agent can run.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

  • Compatibility

    Runs as the PostHog Signals scout in a Claude sandbox with read-only analytics scopes plus signal_scout_internal:write (scratchpad), signal_scout_report:write (the report channel — emit_report / edit_report), and notebook:write (the notebook write-up behind each report). Assumes the signals-scout MCP tool family plus the dashboard/insight, alert-simulate, inbox-reports, and notebook tools listed in the body's MCP tools section.

    From compatibility in the SKILL.md frontmatter.

Context cost

Signals Scout Anomaly Detection loads about 4.6k tokens when it runs, and up to ~19k if it reads all its reference files. Until then it costs about 57 tokens; SKILL.md has 2,291 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~57
When it runs · the whole SKILL.md, loaded when a task matches
~4.6k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~19k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 2,291 words (~4,561 tokens).

“You are a focused anomaly-detection scout. You watch the dashboards and insights this team actually cares about and surface recent anomalies in them — a metric that suddenly spiked, cratered, flat-lined, or broke its trend in the last few hours…”

— opening of SKILL.md by PostHog, Custom licence
name
signals-scout-anomaly-detection
compatibility
Runs as the PostHog Signals scout in a Claude sandbox with read-only analytics scopes plus signal_scout_internal:write (scratchpad), signal_scout_report:write (the report channel — emit_report / edit_report), and notebook:write (the notebook write-up behind each report). Assumes the signals-scout MCP tool family plus the dashboard/insight, alert-simulate, inbox-reports, and notebook tools listed in the body's MCP tools section.
scout-display-name
Anomaly detection
metadata.owner_team
signals
metadata.scope
anomaly_detection

Read the full SKILL.md on GitHub

Files

SKILL.md and 4 other files (scripts, references) in products/signals/skills/signals-scout-anomaly-detection of PostHog/posthog.

  • SKILL.md
  • references/anomaly-methods.md
  • references/report-contract.md
  • references/watchlist-and-memory.md
  • scripts/ks2.py

Open the folder on GitHubat commit c012c8d

Used in 1 other repository

We found 1 copy of this SKILL.md (exact, near-identical or edited) in other folders. This page covers the copy in PostHog/posthog, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Signals Scout Anomaly Detection next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Signals Scout Anomaly Detection compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Signals Scout Anomaly Detection this skillPostHog/posthog40k—~4.6kAutomated safety check: PassCustom licence
TimesFM Forecastinggoogle-research/timesfm34k—~4.7kAutomated safety check: PassApache-2.0
Kqlmicrosoft/fabric-rti-mcp131—~6.2kAutomated safety check: PassMIT
Time Series Analytics Useropen-edge-platform/edge-ai-libraries171—~3.1kAutomated safety check: PassApache-2.0
Aeon Time Series Machine Learningdavila7/claude-code-templates33k13 repos~2.6kAutomated safety check: PassMIT
Azure AI Anomalydetector Javamicrosoft/skills3.1k5 repos~2.3kAutomated safety check: PassMIT

Similar skills

  • TimesFM Forecasting

    google-research/timesfm

    Forecasts any univariate time series zero-shot with Google's TimesFM model, returning point forecasts and calibrated prediction intervals without training.

    34k GitHub stars~4.7k tokensUpdated 11 days ago
    Data & AnalyticsAuto-check passed
  • Kql

    microsoft/fabric-rti-mcp

    Official

    KQL language expertise for writing correct, efficient Kusto queries using the Fabric RTI MCP tools.

    131 GitHub stars~6.2k tokensUpdated 10 days ago
    Data & AnalyticsAuto-check passed
  • Time Series Analytics User

    open-edge-platform/edge-ai-libraries

    Build a new time-series analytics use case on top of the deployed Time Series Analytics microservice — bring it up with Docker Compose (from a repo clone, or by fetching the compose files from…

    171 GitHub stars~3.1k tokensUpdated yesterday
    Data & AnalyticsAuto-check passed
  • Aeon Time Series Machine Learning

    davila7/claude-code-templates

    Guides time series machine learning with the aeon toolkit: classification, regression, clustering, forecasting, anomaly detection, segmentation and similarity search.

    33k GitHub starsUsed in 13 repos~2.6k tokens
    Data & AnalyticsAuto-check passed
  • Official

    Build anomaly detection applications with Azure AI Anomaly Detector SDK for Java.

    3.1k GitHub starsUsed in 5 repos~2.3k tokens
    Data & AnalyticsAuto-check passed
  • Analyzing Cloud Storage Access Patterns

    mukul975/Anthropic-Cybersecurity-Skills

    Detect abnormal access in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage Analytics for after-hours bulk downloads, new-IP access, and…

    34k GitHub stars~599 tokensUpdated 1 mo ago
    Data & AnalyticsAuto-check passed

More from PostHog/posthog

All 254 skills in this repo
  • Authoring Log Alerts

    PostHog/posthog

    Official

    Author useful, low-noise log alerts on services in a PostHog project.

    40k GitHub stars~3k tokensUpdated today
    Auto-check passed
  • Official

    Operating procedure for the conflict-autoresolver agent: sweep open PostHog/posthog PRs that conflict with master, resolve the trivial conflicts (generated artifacts deterministically, source…

    40k GitHub stars~4.2k tokensUpdated today
    Auto-check passed
  • Official

    Help users debug PostHog Error Tracking stack-trace symbolication for any supported platform — JavaScript/TypeScript web, React Native (Hermes), Android (Proguard / R8), or iOS / macOS (dSYM).

    40k GitHub stars~2.2k tokensUpdated today
    Auto-check passed
  • Exploring Apm Traces

    PostHog/posthog

    Official

    Investigates distributed application performance using PostHog APM (OpenTelemetry span) data via MCP.

    40k GitHub stars~3.5k tokensUpdated today
    Auto-check passed
  • Exploring LLM Traces

    PostHog/posthog

    Official

    Debug and inspect LLM/AI agent traces using PostHog's MCP tools.

    40k GitHub stars~4.4k tokensUpdated today
    Auto-check passed
  • Investigate Metric

    PostHog/posthog

    Official

    Diagnose why a product metric changed (dropped, spiked, or plateaued) by orchestrating breakdowns, actors, paths, lifecycle, retention, and annotations queries.

    40k GitHub stars~1.9k tokensUpdated today
    Auto-check passed

Questions about Signals Scout Anomaly Detection

What does Signals Scout Anomaly Detection do?

Signals scout that watches the project's most-viewed dashboards and insights for anomalies — bursts, drops, flat-lines, and trend breaks — against each insight's own seasonality-matched baseline. Signals Scout Anomaly Detection is an agent skill from PostHog/posthog, published by the product's own GitHub organization. Signals scout that watches the project's most-viewed dashboards and insights for anomalies — bursts, drops, flat-lines, and trend breaks — against each insight's own seasonality-matched baseline.

When should I use Signals Scout Anomaly Detection?

Signals Scout Anomaly Detection fits situations like: tasks that involve Anomaly detection; tasks that involve Forecasting and time series.

How do I install Signals Scout Anomaly Detection in Claude Code?

Run `npx skills add PostHog/posthog --skill signals-scout-anomaly-detection -a claude-code`. Or copy the skill folder (products/signals/skills/signals-scout-anomaly-detection in PostHog/posthog) into .claude/skills/signals-scout-anomaly-detection in your project. Claude Code loads it when a task matches its description.

How do I install Signals Scout Anomaly Detection in Codex?

Run `npx skills add PostHog/posthog --skill signals-scout-anomaly-detection -a codex`. Or copy the skill folder (products/signals/skills/signals-scout-anomaly-detection in PostHog/posthog) into .agents/skills/signals-scout-anomaly-detection in your project. Codex loads it when a task matches its description.

Can I use Signals Scout Anomaly Detection in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add PostHog/posthog --skill signals-scout-anomaly-detection -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/signals-scout-anomaly-detection, .gemini/skills/signals-scout-anomaly-detection, .github/skills/signals-scout-anomaly-detection and .opencode/skills/signals-scout-anomaly-detection in your project.

What does Signals Scout Anomaly Detection need to run?

Going by SKILL.md and its folder, Signals Scout Anomaly Detection needs Python for the scripts in its folder. Our summary lists: Python 3. Compatibility (from SKILL.md): Runs as the PostHog Signals scout in a Claude sandbox with read-only analytics scopes plus signal_scout_internal:write (scratchpad), signal_scout_report:write (the report channel — emit_report / edit_report), and notebook:write (the notebook write-up behind each report). Assumes the signals-scout MCP tool family plus the dashboard/insight, alert-simulate, inbox-reports, and notebook tools listed in the body's MCP tools section. .

Does Signals Scout Anomaly Detection access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Signals Scout Anomaly Detection safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Signals Scout Anomaly Detection use?

Signals Scout Anomaly Detection has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Signals Scout Anomaly Detection use?

About 4.6k tokens (SKILL.md is roughly 18k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 15k tokens, read only when the agent opens those files.

What are the alternatives to Signals Scout Anomaly Detection?

Skills that share tags, products or a category with Signals Scout Anomaly Detection: TimesFM Forecasting (google-research/timesfm, 34k stars), Kql (microsoft/fabric-rti-mcp, 131 stars), Time Series Analytics User (open-edge-platform/edge-ai-libraries, 171 stars) and Aeon Time Series Machine Learning (davila7/claude-code-templates, 33k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Signals Scout Anomaly Detection?

PostHog (a GitHub organization, an official publisher) maintains it in PostHog/posthog, which has 40,209 GitHub stars. The repository holds 254 skills in this directory. The repository was last updated on October 10, 2026.

Source: PostHog/posthog on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.