langchain-mcp-adapters
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from external Model Context Protocol (MCP) servers, which serves as a potential vector for indirect prompt injection.
- Ingestion points: Data is pulled into the agent's context through functions such as
load_mcp_tools(),load_mcp_resources(), andload_mcp_prompt()described inSKILL.md. - Capability inventory: The skill converts remote MCP tools into local LangChain
BaseToolobjects, enabling the agent to execute code or operations provided by the server. Resources can also be loaded asBlobobjects. - Sanitization: No explicit sanitization or input validation mechanisms for server-provided content are described in the documentation.
- Boundary markers: The skill does not provide instructions or examples for implementing delimiters to separate untrusted server data from system instructions.
- [EXTERNAL_DOWNLOADS]: The skill references and encourages the installation of the
langchain-mcp-adapterspackage from public registries. - [COMMAND_EXECUTION]: The documentation includes examples of spawning local processes using
stdiotransport, specifically demonstrating the use ofnpxto launch MCP servers such as@modelcontextprotocol/server-filesystem.
Audit Metadata