langsmith
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the LangSmith CLI installation script and various software packages from well-known repositories including GitHub, NPM, and PyPI.
- [REMOTE_CODE_EXECUTION]: The
scripts/setup.shscript and the CLI reference documentation include a command pattern (curl | sh) to download and execute an installation script from LangChain's official GitHub repository. - [COMMAND_EXECUTION]: The
scripts/setup.shscript executes shell commands to install Python and Node.js dependencies and runs a Python snippet to verify the LangSmith connection. - [COMMAND_EXECUTION]: The setup script modifies the user's shell configuration files (such as
.bashrcor.zshrc) to persist environment variables, includingLANGSMITH_API_KEYandLANGSMITH_TRACING, ensuring they are available in future terminal sessions.
Recommendations
- INFO: Downloads code from trusted source(s): https://raw.githubusercontent.com/langchain-ai/langsmith-cli/main/scripts/install.sh
Audit Metadata