skills/giuseppe-trisciuoglio/developer-kit/langchain4j-tool-function-calling-patterns/Gen Agent Trust Hub
langchain4j-tool-function-calling-patterns
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): The file is an informational API reference for developers using LangChain4j. It provides syntax and usage examples for tool and function calling without including any executable malicious logic.
- [DATA_EXPOSURE] (SAFE): Code snippets correctly demonstrate using environment variables (e.g., System.getenv('OPENAI_API_KEY')) for API credentials rather than hardcoding them, adhering to security best practices.
- [INDIRECT_PROMPT_INJECTION] (SAFE): While the documentation explains how to define tool parameters that are populated by an LLM from user input—which creates a standard surface for indirect prompt injection—the guide proactively includes a section on best practices and validation patterns to mitigate such risks.
Audit Metadata