langchain-langgraph-streaming

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
references/websocket-and-reconnect.md

No malicious behavior or intentional obfuscation is evident. The code is an example of WebSocket-based LangGraph streaming, but it has significant application-level security gaps if used without additional controls: unauthenticated client-selected thread IDs can enable cross-user state access, and missing input/resource limits can permit denial of service. The reconnect documentation also overstates automatic resumption of an in-flight invocation.

Confidence: 96%Severity: 67%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:49 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Flangchain-langgraph-streaming%2F@4204b0d2129bf489f06a44994d7d3155a6b5348ee98976c31ad054c695da8307
Security Audit — socket — langchain-langgraph-streaming