langfuse-install-auth
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install official packages from established registries (NPM and PyPI), including
@langfuse/client,@langfuse/tracing, and@opentelemetry/sdk-node. These are standard dependencies for the Langfuse observability platform. - [COMMAND_EXECUTION]: The skill uses standard shell commands (
npm install,pip install,export, andcat) to set up the development environment and configure API keys. The shell access is scoped to package managers in the frontmatter configuration. - [CREDENTIALS_UNSAFE]: The skill provides placeholders for Langfuse API keys (
pk-lf-...,sk-lf-...) and correctly instructs users to store these sensitive credentials in environment variables or a.envfile, which is the recommended practice for secret management.
Audit Metadata