Borrowing it
Nothing to install: this file belongs to KonghaYao/peri. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/KonghaYao/peri/main/.claude/skills/langfuse/SKILL.mdgit clone --depth 1 https://github.com/KonghaYao/periWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/konghayao/peri/langfuse)<a href="https://agentmods.dev/skills/konghayao/peri/langfuse"><img src="https://agentmods.dev/badge/skills/konghayao/peri/langfuse/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/konghayao/peri/langfuse"><img src="https://agentmods.dev/badge/skills/konghayao/peri/langfuse.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Excessive Agency · line 87 Skill selects an external model or provider that may use a different account or billing plan than the operator expects. Undisclosed model switches can cause unexpected cost or quota consumption.Fix: Remove the model/provider override or disclose it prominently and require explicit operator approval before invoking an external coding CLI or billed model.
- high Excessive Agency · line 135 Skill selects an external model or provider that may use a different account or billing plan than the operator expects. Undisclosed model switches can cause unexpected cost or quota consumption.Fix: Remove the model/provider override or disclose it prominently and require explicit operator approval before invoking an external coding CLI or billed model.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00100 | $0.05374 |
| Opus 5.5 | $0.00040 | $0.02150 |
| Sonnet 5.5 | $0.00020 | $0.01075 |
| Haiku 4.5 | $0.00010 | $0.00537 |
Grade A, and why
langfuse scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- Bash(curl *langfuse.com/*) How it starts
The opening of the file, as written. The whole thing — 424 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Langfuse
数据来源与分析方式
| 数据来源 / 需求 | 使用方式 |
|---|---|
| Langfuse trace、observation、session,或平台 API / 文档 | 下文 Langfuse CLI 与 TypeScript 脚本 |
本地 llm-gateway 的 request.json、stream.log,请求差异、缓存断点、上下文增长 |
本地网关日志分析,使用 scripts/llm-log-query.mjs 与 scripts/context-growth.mjs |
- 本地日志方式不依赖 Langfuse API、凭据或网络,不执行下文远端凭据预检。
- 用户只说“分析日志”而未明确来源时,先根据已提供的路径或 trace 信息定位;仍无法确定再询问,不默认查询远端。
- 两种来源不能默认互相替代。跨来源对照需核实 session、请求标识和时间范围;未采集或未返回的字段标记为未检查。
- 原始日志可能包含凭据和私密内容,不直接展示 headers、完整请求体或原始响应;先使用摘要,内容下钻前确认已脱敏。
1. Langfuse API via CLI
Use langfuse-cli to interact with the full Langfuse REST API. Run via bunx (auto-loads .env):
bunx langfuse-cli api --help # 列出所有 resources
bunx langfuse-cli api <resource> --help # List actions for a resource
bunx langfuse-cli api <resource> <action> --help # Show args for an action
bunx langfuse-cli api <resource> <action> [options] # Execute
Credentials
bunx automatically loads .env. Ensure it contains:
LANGFUSE_PUBLIC_KEY=pk-lf-...
LANGFUSE_SECRET_KEY=sk-lf-...
LANGFUSE_HOST=https://cloud.langfuse.com # Required
If credentials are missing, ask the user to add them to .env. Do not ask to paste keys in chat.
CLI Preflight and Query Integrity
Before attributing missing or malformed data to application behavior:
- Confirm
LANGFUSE_HOSTorLANGFUSE_BASE_URLis set, credentials are present, and the selected host returns JSON rather than an HTML fallback. Never print credentials or authorization headers. - Discover the installed CLI schema with
bunx langfuse-cli api --helpand resource/action--help; resource names vary by CLI version, so do not assumeobservations-v2sor another historical alias exists. - For list endpoints, inspect pagination metadata and fetch every required page. The public API page limit is 100; a single page is not proof of completeness.
- Record the requested field projection. If input/output fields were not requested or returned by the selected endpoint, report them as not inspected, not null or missing.
- Stop business-level diagnosis on host/auth/schema failure. A 401, unsupported resource, HTML response, or truncated page set is a query precondition failure, not evidence about the trace producer.
What ships with it
22 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/cli.md 1.1 KB
- references/error-analysis.md 4.5 KB
- references/instrumentation.md 8.7 KB
- references/judge-calibration.md 11 KB
- references/local-gateway-logs.md 12 KB
- references/prompt-migration.md 7.6 KB
- references/sdk-upgrade.md 7.7 KB
- references/skill-feedback.md 2.3 KB
- references/user-feedback.md 4.3 KB
- scripts/analyze.ts 20 KB runs code
- scripts/context-growth.mjs 9.6 KB runs code
- scripts/daily-report.ts 6.4 KB runs code
- scripts/lib.test.ts 7.2 KB runs code
- scripts/lib.ts 23 KB runs code
- scripts/llm-log-query.mjs 58 KB runs code
- scripts/prompt-breakdown.ts 4.3 KB runs code
- scripts/session-analyze.ts 5.8 KB runs code
- scripts/trace-messages.ts 5.5 KB runs code
- scripts/trace-search.ts 5.3 KB runs code
- scripts/trace-tokens.ts 5.4 KB runs code
- scripts/trace-tree.ts 2.7 KB runs code
- scripts/traces-list.ts 4.3 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +14 lines f41fc48b8557
- 1mo ago First seen · 410 lines · 100 tokens per session scan A 9b26f3f64fe1
langfuse is a skill published in the GitHub repository KonghaYao/peri (247 stars, last pushed today), licensed Apache-2.0. It adds 100 tokens to every session and 5,374 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
babysit-pr
Babysit a GitHub pull request after creation by continuously polling review comments, CI checks/workflow runs, and mergeability state until the PR is merged/closed or user help is required. Diagnose failures, retry likely flaky failures up to 3 times, auto-fix/push branch-related issues when appropriate, and keep…
plugin-creator
Create and scaffold plugin directories for Codex with a required .codex-plugin/plugin.json, optional plugin folders/files, valid manifest defaults, and personal-marketplace entries by default. Use when Codex needs to create a new personal plugin, add optional plugin structure, generate or update marketplace entries…
codex-pr-body
Update the title and body of one or more pull requests.
remote-tests
Testing against remote executors in integration tests.
update-v8-version
Update Codex's pinned v8 / rustyv8 versions, validate the release-candidate path, and investigate failed V8 canary or artifact builds. Use when asked to bump V8, update rustyv8 artifacts, prepare or validate a V8 release candidate, check v8-canary, or diagnose why a V8 version update no longer builds.
qa-testing
Verify your work by actually operating the app or website you changed, instead of assuming it works. Strongly recommended whenever you build, modify, or debug a web app, website, or desktop GUI app. Drive real browsers with the agent-browser CLI and native desktop apps with the cua-driver CLI. These are installed on…