langchain-retrieval-agent

Warn

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION

Full Analysis

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone a repository from an untrusted GitHub account.
Evidence: git clone --depth 1 https://github.com/Eng0AI/langchain-retrieval-agent.git . in SKILL.md.
[COMMAND_EXECUTION]: The skill executes package installation and build commands on the downloaded external code, which may contain arbitrary scripts.
Evidence: pnpm install and pnpm build in SKILL.md.

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 23, 2026, 06:06 PM