langgraph-docs
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- External Data Ingestion: The skill retrieves content from external URLs to assist with user queries. This pattern introduces a potential surface for indirect prompt injection, where instructions embedded in the documentation could influence the agent's behavior. However, this is the intended primary purpose of the skill, and the content is sourced from the vendor's official documentation infrastructure.
- Ingestion points:
SKILL.mdfetches an index fromhttps://docs.langchain.com/llms.txtand subsequent pages based on that index. - Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions within the fetched data.
- Capability inventory: The skill uses
fetch_urland provides the retrieved information to the agent's context. - Sanitization: No specific sanitization or filtering of the fetched content is described.
- Network Connectivity: The skill utilizes network operations to fetch documentation. These requests are directed to official domains associated with the skill's author and documentation hosting services.
Audit Metadata