langgraph-agent-patterns
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The utility scripts designed to analyze and visualize graph structures perform dynamic loading and execution of local Python modules.
- Evidence: In
scripts/validate_agent_graph.pyandscripts/visualize_graph.py, theload_graph_from_pathfunction usesimportlib.util.module_from_specandspec.loader.exec_module(module)to load user-supplied Python files. - Context: This behavior is intended to allow the tools to inspect the compiled graph object within the user's project, but it means any code in the targeted file will be executed in the current environment.
- [INDIRECT_PROMPT_INJECTION]: The multi-agent patterns described in the skill are designed to ingest untrusted data (user messages) and interpolate them into prompts for LLM agents.
- Ingestion points: Data enters the system via the
messageslist defined in theTypedDictstate schemas inSKILL.mdandreferences/state-management-patterns.md. - Boundary markers: The implementation guides use system messages to define agent roles but do not include explicit delimiters or "ignore instructions" guards when interpolating user content.
- Capability inventory: The agents are granted capabilities to perform web searches (e.g., via Tavily), write content, and coordinate other agents.
- Sanitization: No sanitization or input validation logic is present in the provided templates to mitigate adversarial input embedded in processed data.
Audit Metadata