langsmith-trace

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • External Dependency Installation: The skill fetches and executes an installation script from the LangChain AI GitHub repository to set up the LangSmith CLI. This is a standard method for distributing the tool.
  • Command Execution: The skill utilizes the langsmith CLI tool to perform operations such as listing, getting, and exporting trace data. These commands are executed in the local shell environment.
  • Data Ingestion Surface: The skill retrieves trace data from the LangSmith service. While this is necessary for its functionality, it represents a surface where external data (trace content) is brought into the agent's context.
  • Ingestion points: Data is ingested via langsmith trace list and langsmith trace get commands described in SKILL.md.
  • Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious content embedded within the traces.
  • Capability inventory: The skill has the capability to execute shell commands via the langsmith CLI.
  • Sanitization: The skill relies on the standard behavior of the CLI tool and the agent's internal guardrails for processing the retrieved data.
  • Secret Management: The instructions follow safe practices by recommending the use of environment variables (LANGSMITH_API_KEY, OPENAI_API_KEY) or .env files for managing sensitive credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 02:39 PM
Security Audit — agent-trust-hub — langsmith-trace