langchain-tool-builder
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs local file system operations to scaffold tool classes and install base classes. Evidence:
SKILL.mdinstructions specify copyingclaude_style_tool.pyto a project's utils directory and generating new.pyfiles in the tools directory. - [SAFE]: The skill is primarily focused on improving the security posture of agentic tools. It implements a 'fail-closed' design where critical safety properties like
is_read_onlyandis_destructivedefault to restrictive values if not explicitly set. - [DATA_EXPOSURE]: The skill instructions contain hardcoded local file paths (e.g.,
/Users/jigege/ai-base/...). While these disclose environment details, they do not expose sensitive credentials or personal data. - [PROMPT_INJECTION]: The skill uses natural language instructions to guide the agent and does not contain attempts to bypass safety filters or override system prompts.
Audit Metadata