debug-with-langwatch
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx langwatch reportto fetch and run the vendor's reporting utility. This is a standard operation for the LangWatch CLI to provide feedback and bug reports to the developers. - [COMMAND_EXECUTION]: The skill performs various CLI operations using
langwatchto retrieve trace data, monitor configurations, and analytics from the LangWatch platform. These commands are essential for the skill's primary purpose of production debugging. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data retrieved from production traces and documentation, which could potentially contain untrusted content.
- Ingestion points: Output from
langwatch trace get,langwatch monitor get, andlangwatch docscommands, as well as production trace content. - Boundary markers: The skill frequently uses the
-o jsonflag, which provides structured data that can be parsed by the agent rather than treated as direct instructions. - Capability inventory: The ability to execute
langwatchCLI commands and perform network queries to the LangWatch API. - Sanitization: The reporting command (
langwatch report) includes a local scrubbing step to remove secrets, API keys, and PII from the data before it is sent.
Audit Metadata