langfuse
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's purpose is plausible, but its actual setup routes Langfuse credentials and observability data through a third-party unpinned Python package from a personal repo instead of Langfuse's official MCP offering. That mismatch makes the credential and supply-chain footprint disproportionate to the stated purpose.
Confidence: 92%Severity: 88%
Audit Metadata