langchain-typescript-quickstart
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Documentation Retrieval: Fetches setup instructions from official vendor documentation at docs.langchain.com. This is a common pattern for providing up-to-date guidance.
- Local Scaffolding: Includes commands for directory creation and package installation, which are standard for developer-oriented setup tools.
- Secret Handling: Encourages the use of environment files for API keys, supporting secure local development practices.
- Dynamic Content Ingestion: The skill fetches instructions from an external documentation source. While the source is a well-known official domain, it creates a surface for indirect prompt injection where external data influences agent behavior.
Audit Metadata