langfuse
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and integration guides from the official vendor website
langfuse.comusingcurlandWebFetch. These operations provide up-to-date information on platform features. - [REMOTE_CODE_EXECUTION]: The skill uses
npxandbunxto execute thelangfuse-clipackage. This is the official command-line tool provided by Langfuse for programmatic data access. As the skill is authored by the vendor and uses their official package, this is considered standard functionality. - [COMMAND_EXECUTION]: The skill uses the
ghCLI to submit user feedback to thelangfuse/skillsrepository via GitHub Discussions. It also usesnpx langfuse-clito interact with the Langfuse REST API. These actions are intended for legitimate skill functionality such as feedback submission and metadata discovery. - [CREDENTIALS_UNSAFE]: The skill handles sensitive API keys but explicitly instructs the user to manage them safely using environment variables or
.envfiles rather than pasting them into the chat. It also correctly recommends using the public key for frontend feedback collection to prevent secret key exposure.
Audit Metadata