langfuse
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected within the skill content. The skill serves its stated purpose as a documentation resource for LLM observability.
- [CREDENTIALS_UNSAFE]: The skill correctly uses placeholders (e.g., 'pk-...', 'sk-...') for API keys in its code examples, following safe documentation practices by not hardcoding real secrets.
- [EXTERNAL_DOWNLOADS]: The skill references legitimate, well-known libraries such as 'langfuse', 'langchain', and 'openai'. It also references the official 'cloud.langfuse.com' service, which is a standard destination for this SDK.
- [INDIRECT_PROMPT_INJECTION]: The skill provides examples of processing user input for tracing and monitoring purposes (e.g., in 'SKILL.md' snippets). While this represents a standard data ingestion surface for LLM applications, the skill does not introduce dangerous capabilities or bypass security boundaries.
Audit Metadata