langsmith-dataset
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Remote script installation: The skill provides instructions to download and execute an installation script for the CLI tool from the vendor's official GitHub repository. This is a common pattern for developer tools that facilitates the setup of necessary environment components.
- Data processing surface: The skill contains instructions for reading and processing execution traces from local files (e.g., JSONL) to convert them into datasets. Because this involves ingesting external data, it represents a surface where untrusted data enters the agent's context before being uploaded to the service.
- Command execution with confirmation bypass: The usage guide includes the
--yesflag to allow automation by skipping interactive confirmation prompts. While useful for non-interactive workflows, this bypasses manual verification steps for operations like dataset deletion.
Audit Metadata