langchain-rate-limits

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill is a comprehensive technical guide for managing rate limits in distributed LangChain applications. It provides high-quality, legitimate implementations for Redis-backed limiters and semaphores, consistent with its stated purpose.
  • [INDIRECT_PROMPT_INJECTION]: The DemandLogger callback in references/measuring-demand.md ingests usage_metadata and error messages from LLM providers for telemetry logging. While these are external inputs, they are used exclusively for monitoring and demand measurement, not for generating further agent actions or executing commands. The risk is minimized as data is logged as a JSON string and capped at 200 characters for error messages.
  • [DYNAMIC_EXECUTION]: The RedisRateLimiter class in references/redis-limiter-pattern.md utilizes a hardcoded Lua script to implement atomic sliding-window rate limiting in Redis. This script is static and does not incorporate untrusted input into its executable logic, representing a standard and safe use of Redis's server-side scripting capabilities.
  • [EXTERNAL_DOWNLOADS]: The documentation references official API guidelines and recommends installing standard, well-known libraries such as langchain-core, langchain-anthropic, langchain-openai, and redis. These resources are from established providers and pose no supply-chain risk in the context provided.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:44 AM