provider-cost-comparison
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
langwatchCLI to perform all operations, includinganalytics query,trace export, andsession eventsto retrieve usage data. - [EXTERNAL_DOWNLOADS]: The instructions direct the user to install the
langwatchpackage globally via NPM (npm install -g langwatch) and reference documentation hosted on the vendor's official domain (langwatch.ai). - [DATA_EXPOSURE]: The skill manages potentially sensitive usage data by exporting it to a local file (
traces.jsonl). It explicitly instructs the user to delete this file after the analysis is complete to prevent data lingering. - [REMOTE_CODE_EXECUTION]: The skill uses
npx langwatch reportfor sending bug reports or feedback. This process includes safety measures such as local scrubbing of secrets (API keys, PII) and a--dry-runflag to allow users to inspect the payload before transmission. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from trace exports and session events. However, it processes this data as structured JSON/JSONL for mathematical cost calculation rather than as instructions for the agent, minimizing injection risks.
Audit Metadata