skillhash

Is langsmith-fetch safe?

Grade A, 90/100. No meaningful risk found.

Debug LangChain and LangGraph agents by fetching execution traces from LangSmith Studio. Use when debugging agent behavior, investigating errors, analyzing tool calls, checking memory operations, or examining agent performance. Automatically fetches recent traces and analyzes execution patterns. Requires langsmith-fetch CLI installed.

ComposioHQ/awesome-claude-skills/langsmith-fetch 77kChecked 4h agoContent last changed 4h ago
A

langsmith-fetch

langsmith-fetch
90/100 · No meaningful risk found2 medium1 low

Debug LangChain and LangGraph agents by fetching execution traces from LangSmith Studio. Use when debugging agent behavior, investigating errors, analyzing tool calls, checking memory operations, or examining agent performance. Automatically fetches recent traces and analyzes execution patterns. Requires langsmith-fetch CLI installed.

Content hash
sha256:73cb17be53103fa42daa1624b6804ba6f69cb0c32f6df2f58d2f610d92b15733
Files
1
Quality
100/100

Security findings

  • mediumInstalls persistenceSL304 · langsmith-fetch/SKILL.md:393
    echo 'export LANGSMITH_API_KEY="your_key"' >> ~/.bashrc

    The skill changes startup files or schedulers, so code keeps running after the session ends. Fix: Avoid modifying shell profiles or schedulers. If needed, print instructions for the user instead.

  • mediumInstalls persistenceSL304 · langsmith-fetch/SKILL.md:394
    echo 'export LANGSMITH_PROJECT="your_project"' >> ~/.bashrc

    The skill changes startup files or schedulers, so code keeps running after the session ends. Fix: Avoid modifying shell profiles or schedulers. If needed, print instructions for the user instead.

  • lowUnpinned package installSL501 · langsmith-fetch/SKILL.md:24
    pip install langsmith-fetch

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).

Files in this skill
  • SKILL.md10.7 KB

Questions about langsmith-fetch

Is langsmith-fetch safe to install?
Our scanner gave langsmith-fetch grade A (90/100): no meaningful risk found. It matched 3 rule(s); review them below before installing. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install langsmith-fetch in Claude Code or Codex?
Run skillhash add github:ComposioHQ/awesome-claude-skills/langsmith-fetch. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if langsmith-fetch changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from ComposioHQ/awesome-claude-skills