langsmith-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/validate_deployment.pycallssubprocess.runto executedocker --version. This is a static command with no user-controlled input, used exclusively to verify environment readiness for hybrid or standalone deployments. - [CREDENTIALS_UNSAFE]: The
.env.exampletemplate includes placeholder keys (e.g.,OPENAI_API_KEY=sk-...) and an example connection string (postgresql://user:password@host:5432/dbname). These are benign instructional markers and do not contain actual secrets. - [EXTERNAL_DOWNLOADS]: Deployment scripts (
scripts/deploy_to_langsmith.py,scripts/rollback_deployment.py) communicate with official LangSmith API hosts (api.host.langchain.comandeu.api.host.langchain.com). This network activity is necessary for the skill's core functionality and targets well-known, legitimate service infrastructure.
Audit Metadata