langchain-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [SAFE]: The skill is designed to enhance security by providing patterns to redact API keys from test artifacts and encouraging the use of deterministic, network-free unit tests.\n- [EXTERNAL_DOWNLOADS]: The instructions recommend installing standard, well-known Python packages from official registries (PyPI), including langchain-core, langgraph, pytest, vcrpy, and pytest-recording. These are legitimate tools for the stated purpose of building a LangChain test loop.\n- [COMMAND_EXECUTION]: The skill utilizes Bash for standard developer operations, such as installing dependencies via pip and executing the test suite with pytest.\n- [CREDENTIALS_UNSAFE]: The skill proactively addresses credential safety by providing VCR configurations that filter sensitive headers like Authorization and x-api-key. It also includes a pre-commit hook script specifically designed to detect and block the commitment of API keys in test cassette files.
Audit Metadata