ratel-langfuse-dashboards
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely within the local repository to generate markdown documentation. It does not perform network operations, call external APIs, or attempt to access sensitive system files such as credentials or private keys.
- [SAFE]: No obfuscation, dynamic code execution, or privilege escalation patterns were identified. All logic is focused on documentation generation using standard file tools.
- [PROMPT_INJECTION]: The skill ingests data from a local documentation file (
ratel-langfuse-instrument.md) to determine the vocabulary for dashboard widgets, representing an indirect prompt injection surface. - Ingestion points: Step 1 instructions involve reading trace names and metadata keys from a local markdown deliverable.
- Boundary markers: No explicit boundary markers are defined to separate the ingested instrumentation vocabulary from the skill's instructions.
- Capability inventory: The skill uses
WriteandEdittools to create documentation files based on the ingested data. - Sanitization: There is no specified validation or sanitization for the instrumentation metadata read from the repository.
Audit Metadata