OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates interaction with the Langfuse API by fetching real-time documentation and executing curl commands. It handles sensitive credentials via environment variables. The primary risk is the reliance on external documentation to guide command construction, which creates a surface for indirect prompt injection.
Detected behaviors
No alerts
No issues