langchain-oss-primer

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • Dependency Recommendations: The skill identifies several standard libraries and integration packages required for agent development, such as langchain, langgraph, and deepagents. These packages are standard components of the referenced ecosystem and are used to establish the core functionality of the agent frameworks.
  • Indirect Prompt Injection Surface: The skill guides the agent in interpreting user project requirements to recommend specific frameworks. Because this involves processing natural language input to drive decision-making, there is a theoretical surface for indirect prompt injection; however, this is inherent to the skill's purpose as a decision-support tool.
  • Capability Inventory: The archetypes described in the skill mention the use of tools with significant system interaction capabilities, including PythonREPL for data analysis and FilesystemMiddleware for file management. These are documented as features for specific use cases like coding assistants and analysis agents.
  • Environment Configuration: The instructions provide templates for setting up necessary environment variables, such as OPENAI_API_KEY and LANGSMITH_API_KEY. The use of <your-key> placeholders follows standard security practices for documentation, ensuring that no actual credentials are exposed within the skill itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 08:16 PM
Security Audit — agent-trust-hub — langchain-oss-primer