Eino

Name: Eino
Author: cloudwego

CAUTIONgrade B · trust 89/100

The ultimate LLM/AI application development framework in Go.

aiai applicationai frameworklangchainlangchain for golangchaingollm application

Overview

From the repository's own README, as read at the audited commit.

# Eino![coverage](https://raw.githubusercontent.com/cloudwego/eino/badges/.badges/main/coverage.svg)[![Release](https://img.shields.io/github/v/release/cloudwego/eino)](https://github.com/cloudwego/eino/releases)[![WebSite](https://img.shields.io/website?up_message=cloudwego&url=https%3A%2F%2Fwww.cloudwego.io%2F)](https://www.cloudwego.io/)[![License](https://img.shields.io/github/license/cloudwego/eino)](https://github.com/cloudwego/eino/blob/main/LICENSE-APACHE)[![Go Report Card](https://goreportcard.com/badge/github.com/cloudwego/eino)](https://goreportcard.com/report/github.com/cloudwego/eino)[![OpenIssue](https://img.shields.io/github/issues/cloudwego/eino)](https://github.com/cloudwego/eino/issues)[![ClosedIssue](https://img.shields.io/github/issues-closed/cloudwego/eino)](https://github.com/cloudwego/eino/issues?q=is%3Aissue+is%3Aclosed)![Stars](https://img.shields.io/github/stars/cloudwego/eino)![Forks](https://img.shields.io/github/forks/cloudwego/eino)English | [中文](README.zh_CN.md)# Overview**Eino['aino]** is an LLM application development framework in Golang. It draws from LangChain, Google ADK, and other open-source frameworks, and is designed to follow Golang conventions.Eino provides:- **[Components](https://github.com/cloudwego/eino-ext)**: reusable building blocks like `ChatModel`, `Tool`, `Retriever`, and `ChatTemplate`, with official implementations for OpenAI, Ollama, and more.- **Agent Development Kit (ADK)**: build AI agents with tool use, multi-agent coordination, context management, interrupt/resume for human-in-the-loop, and ready-to-use agent patterns.- **Composition**: connect components into graphs and workflows that can run standalone or be exposed as tools for agents.- **[Examples](https://github.com/cloudwego/eino-examples)**: working code for common patterns and real-world use cases.![](.github/static/img/eino/eino_concept.jpeg)# Quick Start## ChatModelAgentConfigure a ChatModel, optionally add tools, and you have a working agent:```G

Exposed tools (9) 8 read · 1 write · 0 destructive

Tool	Risk	Description
`AgenticStreamQueryAgent`	read	Test agent for agentic runner query streaming
`AgenticStreamRunnerAgent`	read	Test agent for agentic runner streaming
`PanicAgent`	read	Agent that panics
`UnsupportedModeAgent`	read	Agent with unsupported mode
`headquarters`	read	the company headquarters that coordinates all departments
`non-resumable`	read	cannot resume
`payment_department`	read	the department responsible for all payment-related operations
`plan_execute_subagent`	write	a plan execute subagent
`project_execution_agent`	read	the agent responsible for complex project execution tasks

Details

Source: cloudwego/eino
License: Apache-2.0
Stars: 13,088 · pushed 0d ago

Trust audit

Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: none-observed
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (12)

MEDIUMInventory / provenance · inv.binary · CWE-1104

adk/prebuilt/deep/testdata/checkpoint_data_v0.7.37.bin

checkpoint_data_v0.7.37.bin

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMInventory / provenance · inv.binary · CWE-1104

adk/prebuilt/deep/testdata/checkpoint_data_v0.8.2.bin

checkpoint_data_v0.8.2.bin

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMInventory / provenance · inv.binary · CWE-1104

adk/prebuilt/deep/testdata/checkpoint_data_v0.8.3.bin

checkpoint_data_v0.8.3.bin

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMInventory / provenance · inv.binary · CWE-1104

adk/prebuilt/deep/testdata/checkpoint_data_v0.8.4.bin

checkpoint_data_v0.8.4.bin

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

LOWInventory / provenance · inv.hidden_file · CWE-1104

.golangci.yaml

.golangci.yaml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.licenserc.yaml

.licenserc.yaml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.system_paths · CWE-22, CWE-59

adk/middlewares/agentsmd/agentsmd_test.go:714

b.set("/root/main.md", "start @sub/mid.md end")

LOWFilesystem / path · fs.system_paths · CWE-22, CWE-59

adk/middlewares/agentsmd/agentsmd_test.go:715

b.set("/root/sub/mid.md", "mid @deep/leaf.md mid_end")

LOWFilesystem / path · fs.system_paths · CWE-22, CWE-59

adk/middlewares/agentsmd/agentsmd_test.go:716

b.set("/root/sub/deep/leaf.md", "LEAF")

LOWFilesystem / path · fs.system_paths · CWE-22, CWE-59

adk/middlewares/agentsmd/agentsmd_test.go:718

l := newLoaderConfig(b, []string{"/root/main.md"}, 0, 0, nil)

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

adk/middlewares/plantask/task_get_test.go:73

_, err := tool.InvokableRun(ctx, `{"taskId": "../../../etc/passwd"}`)

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

adk/middlewares/plantask/task_update_test.go:227

_, err := tool.InvokableRun(ctx, `{"taskId": "../../../etc/passwd", "status": "in_progress"}`)

Gates applied: no_behavioural_pass.

Audited 2026-09-18 · audit v0.4.0 · source sha 69291150172a · full audit: observations/trust-audit/mcp-server/cloudwego__eino.json · Report an issue or request a re-scan

Audit history

Date	Source	Verdict	Grade	Score	Change
2026-09-18	`69291150172a`	CAUTION	B	89	first audit

Alternatives

Other servers in the same categories, safer ones first.

Figma Context
2r/0w/0d · SAFE Cursor Talk to Figma
16r/26w/2d · SAFE Cursor Talk To Figma
16r/26w/2d · SAFE WhatsApp
9r/3w/0d · SAFE Godot
8r/6w/0d · SAFE SpotDB
0r/0w/0d · SAFE

Questions

What is the Eino MCP server?

The ultimate LLM/AI application development framework in Go.

What tools does Eino expose?

9 in total: 8 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Eino safe to connect to an agent?

With care. The audit graded it B (89/100) and found 12 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does Eino need?

No credential environment variables were found in its source, so it appears to need none.

How current is this page?

The grade is for one exact copy of the source (69291150172a), read on 2026-09-18. The repository is watched and re-audited when it changes.

Provenance: OBSERVED · read 2026-09-18 · job trust-audit-2026-09-18