langsmith-trace

Fail

Audited by Runlayer on Mar 3, 2026

Risk Level: HIGH
Scan Summary
Max Score
94%
Files
3
Flagged
3
Chunks
10
Flagged Files (3)
langsmith-trace/scripts/query_traces.pyHIGH
93.6%

Malicious tool definition detected

Description: --last-n-minutes 60 # Export errors runs export ./slow.jsonl --min-latency 10 --full # Export slow runs """ if full: include_metadata = include_io = True client = get_client() output_path = Path(output_file).resolve() output_path.parent.mkdir(parents=True, exist_ok=True) params = build_query_params( project, trace_ids, limit or 100, last_n_minutes, since, run_type, False, # is_root=False for runs error, name, raw_filter, min_latency, max_latency, min_tokens, tags, ) with console.sta

langsmith-trace/SKILL.mdHIGH
90.6%

Malicious tool definition detected

Just set environment variables: ```bash export LANGSMITH_TRACING=true export LANGSMITH_API_KEY=<your-api-key> export OPENAI_API_KEY=<your-openai-api-key> # or your LLM provider's key ``` Optional variables: - `LANGSMITH_PROJECT` - specify project name (defaults to "default") - `LANGCHAIN_CALLBACKS_BACKGROUND=false` - use for serverless to ensure traces complete before function exit (Python) </trace_langchain_oss> <trace_other_frameworks> For non-LangChain apps, use the traceable decorator/wrappe

```bash npx tsx query_traces.ts traces list --filter 'and(eq(feedback_key, "correctness"), gte(feedback_score, 0.8))' ``` </typescript> </filters> <export_format> Export creates `.jsonl` files (one run per line) with these fields: ```json {"run_id": "...", "trace_id": "...", "name": "...", "run_type": "...", "parent_run_id": "...", "inputs": {...}, "outputs": {...}} ``` Use `--include-io` or `--full` to include inputs/outputs (required for dataset generation).

langsmith-trace/scripts/query_traces.tsMEDIUM
89.2%

Tool passed security scan

Malicious tool definition detected

Tool: langsmith-trace/scripts/query_traces.ts [4/4] Description: (!outputPath.endsWith(".jsonl")) { outputPath = outputPath.replace(/\.[^.]+$/, ".jsonl"); if (!outputPath.endsWith(".jsonl")) { outputPath += ".jsonl"; } } const lines = allRuns.map((run) => JSON.stringify(extractRun(run, includeMetadata, includeIo)), ); fs.writeFileSync(outputPath, lines.join("

Audit Metadata
Max File Score
94%
Classification
KNOWN_SERVER_ALL_UNKNOWN
Files Scanned
3
Files Flagged
3
Chunks Analyzed
10
Analyzed
Mar 3, 2026, 05:42 PM
Security Audit — runlayer — langsmith-trace