langchain-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill promotes secure credential management by instructing users to use Cloud Run Secret Manager and Vercel Secrets instead of hardcoding API keys or committing
.envfiles. It also demonstrates the use ofpydantic.SecretStrto prevent sensitive values from appearing in logs or tracebacks. - [EXTERNAL_DOWNLOADS]: Instructions include installing standard Python packages (e.g.,
langchain,fastapi,uvicorn) and theuvpackage manager from official registries. All external links point to official documentation from trusted or well-known organizations like Google, Vercel, and LangChain. - [COMMAND_EXECUTION]: Provides standard deployment commands for
gcloud,vercel, anddocker. These commands are necessary for the skill's primary purpose and do not contain hidden or malicious payloads. - [PRIVILEGE_ESCALATION]: The provided Dockerfile template is configured to create and use a non-root user (
uid 10001), following the security principle of least privilege.
Audit Metadata