langchain
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
scripts/check-setup.pyscript uses the__import__function to programmatically verify that required Python packages likelangchain_coreandlangchain_openaiare installed. While this involves dynamic module loading, the module names are derived from a hardcoded list within the script and do not incorporate untrusted input. - [INDIRECT_PROMPT_INJECTION]: The skill provides architecture for RAG pipelines and agents that process external data, such as web pages fetched via
WebBaseLoaderintemplates/rag-pipeline.py. This creates a surface for indirect prompt injection where untrusted external content could attempt to manipulate the agent's logic. * Ingestion points:WebBaseLoaderis used to fetch external documents intemplates/rag-pipeline.py. * Boundary markers: The templates demonstrate basic integration without explicit prompt delimiters or 'ignore' instructions for retrieved content. * Capability inventory: The skill enables tool-calling capabilities as shown intemplates/agent-with-tools.py. * Sanitization: No explicit sanitization or filtering of retrieved document content is shown in the provided templates.
Audit Metadata