migrate-to-langfuse
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill generates and executes shell commands and scripts to perform data extraction from source platforms and migration to the destination.
- [DYNAMIC_EXECUTION]: Instructions direct the agent to write a one-off migration script based on vendor-provided templates and guides, which is then executed to move historical data.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data, including LLM traces and prompts from third-party observability platforms, which presents a potential surface for indirect prompt injection.
- Ingestion points: API responses and data exports from source platforms like LangSmith, Arize, and Braintrust.
- Boundary markers: The skill enforces a mandatory sample run (~10 traces) and user confirmation before a full migration.
- Capability inventory: File writing, shell command execution (Bash), and network requests (curl).
- Sanitization: The skill relies on structural mapping to OTLP JSON and manual user review of sample outputs rather than automated natural language sanitization.
- [EXTERNAL_DOWNLOADS]: Fetches current migration guides and integration documentation from the vendor's official website at langfuse.com.
Audit Metadata