langsmith-trace
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- External Download and Execution: The skill provides a command to install the langsmith CLI tool by fetching a shell script from the vendor's official GitHub repository (langchain-ai/langsmith-cli). This is a standard procedure for tool installation from a trusted source.
- Network Operations: The skill interacts with the LangSmith API (api.smith.langchain.com) to upload and query trace data. This behavior is the core purpose of the skill and targets well-known service endpoints.
- Command Execution: The instructions include several langsmith CLI commands for managing traces, datasets, and experiments, which are intended to be executed in the user's environment to interact with the service.
- Authentication Best Practices: The skill correctly advises using environment variables or dedicated flags for API keys rather than hardcoding credentials, following standard security practices for secret management.
Audit Metadata