langchain-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill does not contain any malicious instructions, obfuscated code, or unauthorized data access patterns. Its behavior is consistent with its stated purpose of assisting in a software version upgrade.\n- [COMMAND_EXECUTION]: The skill specifies the use of shell commands like grep to identify deprecated code patterns and pip to upgrade packages. These actions are standard for the intended developer workflow and do not include suspicious command chaining or privilege escalation.\n- [EXTERNAL_DOWNLOADS]: The skill references and installs official, well-known Python packages from standard registries (e.g., langchain, langgraph, anthropic). These external resources are managed by trusted organizations and are necessary for the upgrade process.\n- [INDIRECT_PROMPT_INJECTION]: The skill generates a migration work list by searching the local codebase for specific strings. While this processes local file content into the agent's context, the risk is negligible as it is limited to identifying known code patterns for refactoring purposes.
Audit Metadata