langfuse-common-errors
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon user-supplied error logs and environment data to trigger diagnostic actions.
- Ingestion points: The skill instructions prompt the agent to process the "exact error, SDK version, and Langfuse base URL" from the user's failing environment.
- Boundary markers: There are no explicit delimiters for the input data, though the instructions provide clear guidance on output sanitization.
- Capability inventory: The skill utilizes
Bash(curl) for network testing,npmfor dependency management, andRead/Grepfor local file analysis. - Sanitization: The instructions explicitly warn the agent: "Do not include API keys, authorization headers, or raw customer prompts in the report," and use shell variable expansion to mask secrets in diagnostic output.
- [COMMAND_EXECUTION]: The skill uses shell commands to diagnose connectivity and verify local environment state.
- Network Diagnostics: Executes
curlhealth checks against the Langfuse API and performsnslookupfor DNS verification. - Environment Inspection: Uses
npm listandpip showto verify installed SDK versions anddocker psto check local container status. - [EXTERNAL_DOWNLOADS]: The troubleshooting steps recommend updating or installing Langfuse SDKs from the official npm registry.
- Resource Fetching: Suggested fixes involve running
npm install @langfuse/client@latest @langfuse/tracing@latest @langfuse/otel@latestto resolve version mismatches.
Audit Metadata