build-langchain-ts-app
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: A technical guide in
references/knowledge-agents.mdcontains an example that fetches a sample SQLite database fromstorage.googleapis.com. This is a well-known service (Google Cloud Storage) and the download provides a standard dataset for tutorial purposes. - [PROMPT_INJECTION]: Deterministic detectors flagged instruction overrides in
references/mcp.md. Analysis confirms these are false positives originating from technical documentation of Model Context Protocol configuration options, such as theonConnectionError: "ignore"parameter. - [SAFE]: The skill is a documentation-only resource and does not include executable scripts in its root directory. It explicitly teaches and provides code for security guardrails, including regex-based PII filtering and SQL query validation.
Audit Metadata