langchain-multimodal
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates processing external content like images and PDFs, which represents an indirect prompt injection surface. Embedded instructions in these media files could potentially influence agent behavior. Ingestion points include data fields in
contentBlocksandfs.readFileSync. No explicit boundary markers or sanitization techniques are provided in the examples. The primary capability utilized ismodel.invoke().\n- [DATA_EXPOSURE_AND_EXFILTRATION]: The examples use thefsmodule to access local files (such as./photo.jpgand./document.pdf). This local file access is limited to project-relative paths for the purpose of demonstrating multimodal data ingestion and does not involve sensitive system files or credentials.
Audit Metadata