build-langchain-ts-app

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as an educational and utility resource for AI agent developers using the LangChain.js ecosystem.
  • [COMMAND_EXECUTION]: Included shell scripts perform standard local operations for development workflows.
  • scripts/check-langchain-versions.sh reads package.json and node_modules to report installed dependency versions and detect major-version conflicts.
  • scripts/scaffold-createagent-app.sh generates boilerplate TypeScript files for a new project, following standard scaffolding patterns.
  • [EXTERNAL_DOWNLOADS]: Documentation references external resources for development purposes.
  • references/agents/knowledge-agents.md includes code to fetch a sample database fixture from a well-known Google Storage bucket (https://storage.googleapis.com/benchmarks-artifacts/chinook/Chinook.db).
  • [PROMPT_INJECTION]: Documentation in references/providers/mcp.md mentions prompt injection strings like "ignore previous instructions", but this is strictly defensive guidance advising users on how to protect their own tools from injection attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 10:27 PM