langgraph-adk

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is a legitimate development utility for architecting and scaffolding LangGraph CLI applications.
  • [SAFE]: Documentation and recipes (e.g., AWS assistant) include robust security guidance, such as stripping managed flags to prevent account escaping and using environment isolation for shell-based tools.
  • [SAFE]: External dependencies are restricted to well-known, established libraries from the LangChain and React ecosystems.
  • [SAFE]: The skill implements a mandatory review gate (/codex:review) to ensure generated code is audited before completion.
  • [SAFE]: Data handling for telemetry (LangSmith) is gated by a mandatory privacy disclosure and user confirmation step.
  • [COMMAND_EXECUTION]: The skill scaffolds agents capable of executing bash commands and AWS CLI commands. It provides comprehensive safety mechanisms, including command classification (read vs. write), mandatory human-in-the-loop approval for mutations, and strict environment variable stripping to prevent privilege escalation or credential leakage.
  • [PROMPT_INJECTION]: The skill scaffolds agents that ingest content from a local AGENTS.md file (see references/chat-aws-repo.md). Ingestion points: AGENTS.md file content is loaded and appended to the system prompt; Boundary markers: The content is wrapped in a markdown fenced block; Capability inventory: The scaffolded agents can execute shell commands via a bash tool and AWS commands via an aws_cli tool; Sanitization: Content is loaded and trimmed but not explicitly sanitized for prompt instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 06:03 AM
Security Audit — agent-trust-hub — langgraph-adk