pullPromptCommit

Pull a prompt commit from the LangSmith API.

Public prompts referenced by owner/name cross a trust boundary because the prompt manifest may contain serialized LangChain objects and configuration that affect runtime behavior. For example, a prompt can intentionally configure a model with a custom base URL, headers, model name, or other constructor arguments. These are supported features, but they also mean the prompt contents should be treated as executable configuration rather than plain text.

Set dangerouslyPullPublicPrompt: true only after reviewing and trusting the prompt contents, not merely the publishing account. Prompts from your own or your organization's account can still be unsafe if that account or prompt was compromised.

When pulling a trusted external prompt, prefer pinning to a specific commit rather than following a mutable latest version. Using includeModel: true increases risk and should be avoided for public prompts or prompts outside your own organization.