context-sweet-spot
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
langwatchCLI tool usingnpm install -g langwatch. As this is the official package for the skill's authoring organization, this is expected behavior. - [EXTERNAL_DOWNLOADS]: The skill mentions fetching documentation in Markdown format from
langwatch.ai. These are official documentation resources from the vendor. - [COMMAND_EXECUTION]: The skill makes extensive use of the
langwatchCLI to export session data (langwatch trace export), view session details (langwatch session events), and perform login/documentation lookups. All commands are scoped to the vendor's own tooling. - [COMMAND_EXECUTION]: The skill suggests running
npx --yes langwatch report --user-approvedto send bug reports or feedback. This command includes a--dry-runoption for user review and explicitly requires a--user-approvedflag to function, providing transparency and user control. - [DATA_EXFILTRATION]: While the skill exports session data to a local file (
coding-traces.jsonl), this data remains on the user's machine for local analysis via scripts. The only network transmission of data described is the optional, user-initiated feedback report, which includes local scrubbing of secrets and PII.
Audit Metadata