56 results available
Sign in
Skills directory

all-feature-flags-nodejs

posthog

·

Last changed
Hardened

This skill has been hardened by Chainguard

Last changed

This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 2. Classified findings closed: 2. Classified findings remaining: 0. Unclassified scanner findings remaining: 0. Review findings closed: 5. Review findings remaining: 8.

Open before hardening

1

High

1

Medium
Open after hardening

None

Expand
File
Group
Subtype
Severity
Status
SKILL.md

Obfuscation & Evasion

Trigger-based activation

High
Closed
references/adding-feature-flag-code.md

Sensitive Data & Secret Exposure

Data exfiltration

Medium
Closed

2 findings

SKILL.md

PostHog feature flags for Node.js

This skill helps you add PostHog feature flags to Node.js applications.

Reference files

  • references/nodejs.md - Node.js feature flags installation - docs
  • references/adding-feature-flag-code.md - Adding feature flag code - docs
  • references/best-practices.md - Feature flag best practices - docs

Consult the documentation for API details and framework-specific patterns.

Key principles

  • Environment variables: Always use environment variables for PostHog keys. Never hardcode them.
  • Minimal changes: Add feature flag code alongside existing logic. Don't replace or restructure existing code.
  • Boolean flags first: Default to boolean flag checks unless the user specifically asks for multivariate flags.
  • Server-side when possible: Prefer server-side flag evaluation to avoid UI flicker.

Framework guidelines

No specific framework guidelines.

Install

Install with chainctl
chainctl skill install public/posthog/all-feature-flags-nodejs:latest
Get started with chainctl
View source

Harden your own skills

Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.

Provenance

Upstream sourcehttps://github.com/posthog/skills
Upstream commitf322cbb89771c2cf5d3c2eafa973371633bef064
OCI reference

skills.cgr.dev/public/github.com/posthog/skills/posthog/all/skills/feature-flags-nodejs:latest

License

MIT

Files

HARDENING.md

LICENSE

SKILL.md

references/adding-feature-flag-code.md

references/best-practices.md

references/nodejs.md

The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing

Solutions

FedRAMPPCI DSSCMMC 2.0SOC 2Golden ImagesCVE RemediationPublic SectorStartups

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsSupply Chain Security 101Chainguard CoursesDocumentationTrust CenterChainguard Slack Community

Company

About UsBlogOpen Source LeadershipPartnersNewsroomCareersLegal
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.