Skip to main content

langfuse-local-dev-loop

Facilitates a local development workflow for Langfuse with hot reload and debugging, enhancing LLM application development.

Install this skill

or
62/100

Security score

The langfuse-local-dev-loop skill was audited on May 12, 2026 and we found 22 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 76

Template literal with variable interpolation in command context

SourceSKILL.md
76console.log(`\n Trace: ${host}/trace/${traceId}\n`);
medium line 103

Template literal with variable interpolation in command context

SourceSKILL.md
103console.log(`\n Trace: ${trace.getTraceUrl()}\n`);
medium line 143

Template literal with variable interpolation in command context

SourceSKILL.md
143console.log(` [${name}] ${duration}ms`);
medium line 151

Template literal with variable interpolation in command context

SourceSKILL.md
151await startActiveObservation(`debug/${name}`, async () => {
low line 41

Access to .env file

SourceSKILL.md
41# .env.local (git-ignored)
low line 59

Access to .env file

SourceSKILL.md
59const isDev = process.env.NODE_ENV !== "production";
low line 75

Access to .env file

SourceSKILL.md
75const host = process.env.LANGFUSE_BASE_URL || "https://cloud.langfuse.com";
low line 93

Access to .env file

SourceSKILL.md
93const isDev = process.env.NODE_ENV !== "production";
low line 117

Access to .env file

SourceSKILL.md
117"dev": "tsx watch --env-file=.env.local src/index.ts",
low line 118

Access to .env file

SourceSKILL.md
118"dev:debug": "DEBUG=langfuse* tsx watch --env-file=.env.local src/index.ts",
low line 119

Access to .env file

SourceSKILL.md
119"dev:trace": "LANGFUSE_DEBUG=true tsx watch --env-file=.env.local src/index.ts"
low line 228

Access to .env file

SourceSKILL.md
228# Update .env.local
low line 229

Access to .env file

SourceSKILL.md
229echo 'LANGFUSE_BASE_URL=http://localhost:3000' >> .env.local
low line 44

External URL reference

SourceSKILL.md
44LANGFUSE_BASE_URL=https://cloud.langfuse.com
low line 75

External URL reference

SourceSKILL.md
75const host = process.env.LANGFUSE_BASE_URL || "https://cloud.langfuse.com";
low line 201

External URL reference

SourceSKILL.md
201- NEXTAUTH_URL=http://localhost:3000
low line 225

External URL reference

SourceSKILL.md
225# Wait for startup, then visit http://localhost:3000
low line 229

External URL reference

SourceSKILL.md
229echo 'LANGFUSE_BASE_URL=http://localhost:3000' >> .env.local
low line 240

External URL reference

SourceSKILL.md
240| Traces going to cloud | Wrong `LANGFUSE_BASE_URL` | Point to `http://localhost:3000` |
low line 243

External URL reference

SourceSKILL.md
243- [TypeScript SDK Setup](https://langfuse.com/docs/observability/sdk/typescript/setup)
low line 244

External URL reference

SourceSKILL.md
244- [Self-Hosting Docker Compose](https://langfuse.com/self-hosting/deployment/docker-compose)
low line 245

External URL reference

SourceSKILL.md
245- [Advanced SDK Configuration](https://langfuse.com/docs/observability/sdk/typescript/advanced-usage)
Scanned on May 12, 2026
View Security Dashboard
Installation guide →