langgraph-docs

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • External Data Ingestion: The skill retrieves content from external URLs to assist with user queries. This pattern introduces a potential surface for indirect prompt injection, where instructions embedded in the documentation could influence the agent's behavior. However, this is the intended primary purpose of the skill, and the content is sourced from the vendor's official documentation infrastructure.
  • Ingestion points: SKILL.md fetches an index from https://docs.langchain.com/llms.txt and subsequent pages based on that index.
  • Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions within the fetched data.
  • Capability inventory: The skill uses fetch_url and provides the retrieved information to the agent's context.
  • Sanitization: No specific sanitization or filtering of the fetched content is described.
  • Network Connectivity: The skill utilizes network operations to fetch documentation. These requests are directed to official domains associated with the skill's author and documentation hosting services.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 12:45 AM
Security Audit — agent-trust-hub — langgraph-docs