langfuse
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [Indirect Prompt Injection] (MEDIUM): The skill captures untrusted LLM input and output data for tracing. Ingestion points:
trace.generationandopenai.chat.completions.createinSKILL.md. Capabilities: Captured data is transmitted to an external host via network operations. Sanitization: No data scrubbing or sanitization logic is demonstrated. Boundary markers: The snippets lack delimiters or instructions to ignore embedded prompts within the traces. - [Data Exposure & Exfiltration] (LOW): The skill facilitates network connections to
cloud.langfuse.com, which is not on the whitelist of trusted domains. While appropriate for the tool's purpose, it remains an external network capability. API keys in the examples use placeholders (e.g.,sk-...) and do not expose real credentials.
Audit Metadata