langfuse-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data, including prompt templates from local JSON files and datasets from the Langfuse API, which are then interpolated into LLM completion requests.
- Ingestion points: The
scripts/deploy-prompts.mjsscript reads fromsrc/prompts/*.json, andtests/ai/experiment-gate.test.tsingests data from theintent-classification-testdataset. - Boundary markers: No specific delimiters or boundary markers are implemented in the OpenAI completion calls to separate instruction from data.
- Capability inventory: The skill utilizes file system access (
fs), network operations (OpenAI and Langfuse SDKs), and shell execution capabilities via the allowedBash(gh:*)tool. - Sanitization: There is no evidence of sanitization or validation of the template content or dataset records before they are processed by the LLM.
- [EXTERNAL_DOWNLOADS]: The skill configuration and instructions involve fetching dependencies and tools from established services during the CI process.
- Details: The GitHub Actions workflow utilizes official actions such as
actions/checkout@v4andactions/setup-node@v4to prepare the execution environment. - Details: Dependencies are managed and executed using standard Node.js tools, including
npm ciandnpx vitest, which fetch packages from the public NPM registry.
Audit Metadata