Skip to main content

langfuse-observability

Enables comprehensive observability for Langfuse integrations with metrics, dashboards, and alerts for LLM operations.

Install this skill

or
88/100

Security score

The langfuse-observability skill was audited on Mar 3, 2026 and we found 8 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 256

Template literal with variable interpolation in command context

SourceSKILL.md
256```yaml
low line 141

Access to .env file

SourceSKILL.md
141this.environment = process.env.NODE_ENV || "development";
low line 232

Access to .env file

SourceSKILL.md
232publicKey: process.env.LANGFUSE_PUBLIC_KEY!,
low line 233

Access to .env file

SourceSKILL.md
233secretKey: process.env.LANGFUSE_SECRET_KEY!,
low line 415

External URL reference

SourceSKILL.md
415- [Prometheus Best Practices](https://prometheus.io/docs/practices/naming/)
low line 416

External URL reference

SourceSKILL.md
416- [Grafana Dashboards](https://grafana.com/docs/grafana/latest/dashboards/)
low line 417

External URL reference

SourceSKILL.md
417- [AlertManager](https://prometheus.io/docs/alerting/latest/alertmanager/)
low line 418

External URL reference

SourceSKILL.md
418- [Langfuse Analytics](https://langfuse.com/docs/analytics)
Scanned on Mar 3, 2026
View Security Dashboard
Installation guide →