langgraph-decision-models

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • External Package Installation: The skill references the installation of the langchain-typesafe package. This is an external dependency used to provide the classification primitives (Noul, Choice, Score) described in the instructions. In standard usage, this is a routine integration for extending agent capabilities.
  • API Key Management: The instructions describe providing authentication credentials to the TypeSafeClassifier using environment variables or a secure gateway. This demonstrates safe practice for secret management by avoiding hardcoded credentials within the skill itself.
  • Network Operations: The skill configures a classifier to communicate with a remote gateway at gateway.smith.langchain.com. This is an expected network operation for the skill's purpose of utilizing remote decision models, and it targets a well-known service associated with the developer ecosystem.
  • Indirect Prompt Injection Surface: The skill contains an ingestion surface where external, untrusted data (e.g., ticket text) is processed by a classifier to influence routing logic.
  • Ingestion points: Data enters the context via the state["text"] parameter in the classify function (found in SKILL.md) and is processed across multiple items in the fan_out function.
  • Boundary markers: The skill relies on natural language instructions and criteria provided to the classification models (e.g., Noul(instructions=...)) rather than explicit structural delimiters for the data.
  • Capability inventory: The results of the classification are consumed by a Python route function that decides whether to escalate, close, or handle an item.
  • Sanitization: The skill focuses on semantic judgment through the model rather than explicit sanitization or filtering of the input text before classification. The use of typed probability outputs for routing is generally more resilient than parsing raw LLM text.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 04:26 PM
Security Audit — agent-trust-hub — langgraph-decision-models