langchain-oss-primer
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- Dependency Recommendations: The skill identifies several standard libraries and integration packages required for agent development, such as
langchain,langgraph, anddeepagents. These packages are standard components of the referenced ecosystem and are used to establish the core functionality of the agent frameworks. - Indirect Prompt Injection Surface: The skill guides the agent in interpreting user project requirements to recommend specific frameworks. Because this involves processing natural language input to drive decision-making, there is a theoretical surface for indirect prompt injection; however, this is inherent to the skill's purpose as a decision-support tool.
- Capability Inventory: The archetypes described in the skill mention the use of tools with significant system interaction capabilities, including
PythonREPLfor data analysis andFilesystemMiddlewarefor file management. These are documented as features for specific use cases like coding assistants and analysis agents. - Environment Configuration: The instructions provide templates for setting up necessary environment variables, such as
OPENAI_API_KEYandLANGSMITH_API_KEY. The use of<your-key>placeholders follows standard security practices for documentation, ensuring that no actual credentials are exposed within the skill itself.
Audit Metadata