langchain-dev-guide
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes explicit security warnings in
reference/cn-models/README.md, instructing developers never to read or write sensitive user configuration files such as.envorcredentials.json. - [SAFE]: The
template/chat_model.pyfollows best practices for secret management by usingsecret_from_envandfrom_envto handle API keys and base URLs rather than hardcoding credentials. - [SAFE]: Instructions in
reference/deepagents.mdregarding filesystem access and shell execution include clear warnings about security implications, such as the risks of path traversal and the importance of using sandboxes for shell commands in production environments. - [SAFE]: The external libraries and tools mentioned, including ecosystem packages like
langchain-openaiand vendor-provided tools likecontextseekandlangchain-dev-utilsfromob-labs, are consistent with the skill's stated purpose of providing engineering fixes and integrations for the LangChain ecosystem.
Audit Metadata