langgraph

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and coding patterns for the LangGraph framework without any malicious intent or hidden code. The instructions focus on establishing robust and secure workflow management.- [CREDENTIALS_UNSAFE]: Usage of connection strings in examples like PostgresSaver.from_conn_string("postgresql://...") uses generic placeholders and adheres to best practices by recommending environment variable management and .env files.- [EXTERNAL_DOWNLOADS]: Referenced packages and libraries such as @langchain/langgraph, pydantic, and sentence-transformers are well-known, established libraries in the AI ecosystem. These are documented for use in standard development workflows.- [DATA_EXFILTRATION]: The skill provides guidance on using WebFetch and WebSearch tools within a controlled workflow environment. It specifically addresses risks by providing patterns for human-in-the-loop (HITL) approval gates. (1) Ingestion: Processes user-supplied query and messages. (2) Boundary: Recommends interrupt() for human approval and explicit TypedDict schemas. (3) Capability: Demonstrates tool execution and state updates. (4) Sanitization: Promotes Pydantic validation and state reducers to prevent schema confusion.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 12:06 AM