langsmith-observability

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS] (LOW): The skill references the official langsmith package and recommends installation via pip install langsmith. Per [TRUST-SCOPE-RULE], langchain-ai is a trusted organization, and the package is a standard industry tool for LLM observability.
  • [CREDENTIALS_UNSAFE] (SAFE): The documentation correctly identifies the need for an API key (LANGSMITH_API_KEY) but uses placeholders like "your-api-key" and "your-key", which is a safe practice for documentation.
  • [DATA_EXFILTRATION] (SAFE): While the skill's primary purpose is to send execution traces to an external platform (LangSmith), it includes explicit instructions and code examples for data sanitization (e.g., sanitize_inputs and process_inputs) to prevent the accidental transmission of sensitive data like passwords.
  • [COMMAND_EXECUTION] (SAFE): Includes standard shell commands for package installation and environment variable configuration which are consistent with the skill's stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:21 PM