langgraph-testing-evaluation
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: Multiple scripts, such as
scripts/generate_test_cases.py,scripts/compare_agents.py, and their JavaScript counterparts, use dynamic importing (importlib.import_moduleandimport()) to load agent logic and graphs from local files. This is the primary mechanism for testing external code and is considered a standard functional requirement for this type of tool. - [EXTERNAL_DOWNLOADS]: The skill integrates with LangSmith (
smith.langchain.com), a well-known service for LLM application evaluation. Scripts such asscripts/evaluate_with_langsmith.pyfetch datasets and upload experiment results to LangSmith using the official SDK. - [INDIRECT_PROMPT_INJECTION]: As a tool designed to process agent trajectories and datasets, the skill has an inherent attack surface for indirect prompt injection. If an agent is tasked with evaluating a malicious dataset containing hidden instructions, those instructions could influence the agent's behavior. This is a low-severity risk typical of evaluation tools.
- Ingestion points:
scripts/run_trajectory_eval.pyandscripts/evaluate_with_langsmith.pyingest data from local JSON files and remote LangSmith datasets. - Boundary markers: Not explicitly present; the scripts pass data directly to the agent or evaluator.
- Capability inventory:
scripts/compare_agents.pyandscripts/run_trajectory_eval.pyexecute loaded agent functions. - Sanitization: Relies on standard SDK behavior and basic JSON parsing without specific sanitization of the input strings.
- [COMMAND_EXECUTION]: The
SKILL.mdprovides numerous examples of shell commands for the user to execute viauv runandnode. These are intended for triggering the provided evaluation and testing scripts locally.
Audit Metadata