📦

Audit History

langchain-architecture - 7 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v7 LatestJul 7, 2026, 08:01 AM No confirmed findings0No capability change
v6 Jul 7, 2026, 08:01 AM No confirmed findings0External commands
v5 Jul 1, 2026, 12:23 AM No confirmed findings0 External commands
v4 Jan 17, 2026, 08:02 AM No confirmed findings0No capability change
v3 Jan 17, 2026, 08:02 AM No confirmed findings0External commands
v2 Jan 6, 2026, 04:16 AM No confirmed findings0No capability change
v1 Jan 6, 2026, 04:16 AM No confirmed findings0Baseline

Jul 7, 2026, 08:01 AM

All static external command findings are false positives caused by Markdown fenced Python examples. The network reconnaissance finding is also a false positive because the cited line describes general LangChain agent design, not scanning activity.

1
Files scanned
339
Lines analyzed
1
Review items
0
False positives ignored
Audited by: codex

Jul 7, 2026, 08:01 AM

All static external command findings are false positives caused by Markdown fenced Python examples. The network reconnaissance finding is also a false positive because the cited line describes general LangChain agent design, not scanning activity.

1
Files scanned
339
Lines analyzed
1
Review items
0
False positives ignored
Audited by: codex

Jul 1, 2026, 12:23 AM

Static analysis reported external command, weak cryptography, and network reconnaissance patterns, but review found these are false positives from markdown code fences and LangChain terminology. The file is guidance-only documentation with Python examples and no executable installer, shell command, secret access, prompt injection, or data exfiltration behavior.

1
Files scanned
339
Lines analyzed
0
Review items
3
False positives ignored
Static false positives ignored (3)

These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.

Low
False Positive: Markdown Code Fences Flagged as Shell Execution
The external command detections correspond to triple backtick markdown fences around Python examples. They are documentation delimiters, not Ruby backtick execution or shell commands.
Each cited location is a markdown fence or Python documentation example. No executable Ruby or shell command context exists in the skill file.
Low
False Positive: Weak Cryptography Pattern
The weak cryptography detections occur on descriptive LangChain text and agent constants. No hashing, encryption, cipher selection, or credential handling code is present at these locations.
Manual review found no cryptographic API use at the cited lines. The lines contain prose or LangChain agent configuration terms.
Low
False Positive: Network Reconnaissance Pattern
The network reconnaissance detection is a use-case bullet about AI agents with tool access. It does not instruct port scanning, host discovery, probing, or unauthorized network enumeration.
The cited line is high-level product documentation. No reconnaissance commands, targets, ports, or network scanning libraries are referenced.
No confirmed security findings were recorded for this completed audit.
Audited by: codex

Jan 17, 2026, 08:02 AM

Documentation-only skill containing educational content about LangChain architecture patterns. All 44 static findings are false positives: SHA-256 hashes flagged as C2, LangChain class names flagged as weak crypto, and markdown code blocks flagged as shell execution. No executable code, network calls, file system access, or security risks present.

2
Files scanned
518
Lines analyzed
1
Review items
0
False positives ignored
Audited by: claude

Jan 17, 2026, 08:02 AM

Documentation-only skill containing educational content about LangChain architecture patterns. All 44 static findings are false positives: SHA-256 hashes flagged as C2, LangChain class names flagged as weak crypto, and markdown code blocks flagged as shell execution. No executable code, network calls, file system access, or security risks present.

2
Files scanned
518
Lines analyzed
1
Review items
0
False positives ignored
Audited by: claude

Jan 6, 2026, 04:16 AM

This is a documentation-only skill containing educational content about LangChain architecture patterns. No executable code, network calls, file system access, or security risks detected.

4
Files scanned
457
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 6, 2026, 04:16 AM

This is a documentation-only skill containing educational content about LangChain architecture patterns. No executable code, network calls, file system access, or security risks detected.

4
Files scanned
457
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude