·
Last changedVersion:
This version passed the hardening gate. Hardening applied 2 targeted changes and preserved all other text. Classified findings before hardening: 1. Classified findings closed: 0. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 2. Review findings remaining: 10.
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/adding-feature-flag-code.md | Sensitive Data & Secret Exposure | Data exfiltration | Medium | Open |
1 finding
This skill helps you add PostHog feature flags to iOS applications.
references/ios.md - Ios feature flags installation - docsreferences/adding-feature-flag-code.md - Adding feature flag code - docsreferences/best-practices.md - Feature flag best practices - docsConsult the documentation for API details and framework-specific patterns.
Check if a PostHog MCP server is connected. If available, look for tools related to feature flag management (creating, listing flags). Use these tools to manage flags directly in PostHog rather than requiring the user to do it manually in the dashboard.
PostHogEnv enum with a value computed property that calls ProcessInfo.processInfo.environment[rawValue] — cases should be projectToken = "POSTHOG_PROJECT_TOKEN" and host = "POSTHOG_HOST", set in the Xcode scheme's Run environment variablesPBXBuildFile (with productRef), an XCSwiftPackageProductDependency (with package and productName), and an XCRemoteSwiftPackageReference (with repositoryURL and requirement). The build file goes in the Frameworks phase files, the product dependency goes in the target's packageProductDependencies, and the package reference goes in the project's packageReferences.https://github.com/PostHog/posthog-ios/releases before setting the minimumVersion in the SPM package reference — do not hardcode a stale versionENABLE_OUTGOING_NETWORK_CONNECTIONS = YES to the target's build settings so PostHog can reach its servers — do NOT disable the sandbox entirelyGet started with chainctlchainctl skill install public/posthog/ios:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/posthog/skills/posthog/feature-flags/skills/ios:latest
MIT
HARDENING.md
LICENSE
SKILL.md
references/adding-feature-flag-code.md
references/best-practices.md
references/ios.md