langfuse-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and implementation examples for deploying Langfuse observability in production environments. It emphasizes the use of secret management solutions instead of hardcoding credentials.
- [SAFE]: The provided verification scripts (
verify-langfuse-prod.tsandreferences/implementation.md) are designed to validate environment configuration, API connectivity, and trace creation. While they inspect environment variables likeLANGFUSE_PUBLIC_KEYandLANGFUSE_SECRET_KEY, they only print truncated versions for verification and explicitly warn against printing full keys or trace payloads. - [SAFE]: All external references and dependencies, including the Langfuse SDKs (
@langfuse/otel,langfuse,@langfuse/tracing,@langfuse/client) and OpenTelemetry SDKs, are official and well-known packages for observability. - [SAFE]: The skill uses standard tool permissions (
Read,Write,Edit,Bash(npm:*),Grep) to facilitate checklist auditing and configuration verification without requesting excessive privileges.
Audit Metadata