langsmith

Pass

Audited by Gen Agent Trust Hub on Apr 19, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the LangSmith CLI installation script and various software packages from well-known repositories including GitHub, NPM, and PyPI.
  • [REMOTE_CODE_EXECUTION]: The scripts/setup.sh script and the CLI reference documentation include a command pattern (curl | sh) to download and execute an installation script from LangChain's official GitHub repository.
  • [COMMAND_EXECUTION]: The scripts/setup.sh script executes shell commands to install Python and Node.js dependencies and runs a Python snippet to verify the LangSmith connection.
  • [COMMAND_EXECUTION]: The setup script modifies the user's shell configuration files (such as .bashrc or .zshrc) to persist environment variables, including LANGSMITH_API_KEY and LANGSMITH_TRACING, ensuring they are available in future terminal sessions.
Recommendations
  • INFO: Downloads code from trusted source(s): https://raw.githubusercontent.com/langchain-ai/langsmith-cli/main/scripts/install.sh
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 19, 2026, 02:13 AM