Back to plugin

Security audit

Langfuse Bridge

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed observability bridge that sends OpenClaw run diagnostics and transcript-derived trace details to Langfuse when configured.

Install only if you are comfortable sending OpenClaw conversation and tool-trace content to your configured Langfuse instance. Treat the Langfuse secret key and base URL as sensitive configuration, and avoid enabling this for sessions that may contain secrets or regulated data unless your Langfuse deployment and retention settings are appropriate.

Static analysis

No suspicious patterns detected.