langsmith-evaluator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Installation Script from Vendor Repository: The skill fetches an installation script for the LangSmith CLI tool directly from the vendor's official GitHub repository (
langchain-ai/langsmith-cli). This is a standard method for deploying the necessary tooling to interact with the LangSmith platform. - Command Line Interface (CLI) Usage: The skill utilizes the
langsmithCLI tool to manage evaluators, including listing, uploading, and deleting them. These operations are essential for maintaining evaluation datasets and project-level quality checks. - Agent Output Processing Surface: The skill defines evaluators that ingest data from agent execution traces (
run.outputs) to perform quality assessments (LLM-as-Judge). As these evaluators process potentially untrusted outputs generated by AI agents, they represent an indirect prompt injection surface. - Ingestion points: Evaluator functions like
accuracy_evaluatorandtrajectory_evaluatorinSKILL.mdaccess data viarun.outputs. - Boundary markers: No specific delimiters or "ignore instructions" directives are present in the provided templates for processing these outputs.
- Capability inventory: The evaluators are designed to return scores and comments; they do not possess capabilities for file writing, network exfiltration, or arbitrary command execution.
- Sanitization: The skill does not include specific logic for sanitizing or filtering agent outputs before they are processed by the judge model.
Audit Metadata