Agent skill · Audited from source
ecosystem-primer
skill · langchain-ai/langchain-skillsMIT licenceAudited 26 Oct 2026 · source a78b2e2257e3
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit a78b2e2257e3 and found no filesystem, network or shell access and no hard-coded secrets. What it does: INVOKE FIRST for any LangChain / LangGraph / Deep Agents agent building project before consulting other skills or writing any agent code. Required starting point for up to date info on framework selection (LangChain vs…
Cite
Cite this page
ModelsAtlas. “ecosystem-primer (langchain-ai/langchain-skills)”. Retrieved 26 Oct 2026. https://modelsatlas.com/skills/langchain-ai/ecosystem-primer
Trust audit
Audit 0.4.1 · source read 26 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha a78b2e2257e3 · 26 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherlangchain-ai GitHub organizationOwner of the repository this skill is read from
- Source folderlangchain-ai/langchain-skills/config/skills/ecosystem-primerThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdicta78b2e2257e3A new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: INVOKE FIRST for any LangChain / LangGraph / Deep Agents agent building project before consulting other skills or writing any agent code. Required starting point for up to date info on framework selection (LangChain vs…
--- name: ecosystem-primer description: "INVOKE FIRST for any LangChain / LangGraph / Deep Agents agent building project before consulting other skills or writing any agent code. Required starting point for up to date info on framework selection (LangChain vs LangGraph vs Deep Agents vs hybrid composition), agent patterns, install, environment setup, and which skill to load next." --- <overview> LangChain Inc. maintains three layered open-source tools for building agents, plus LangSmith for observability. The stack, top-down: - **Deep Agents** (top layer, *harness*) — batteries-included toolkit built on LangChain + LangGraph. Ships with planning, file management, subagent spawning, and memory out of the box. - **LangGraph** (middle layer, *runtime*) — low-level orchestration for durable execution, custom control flow, and stateful workflows. LangChain agents run on top of LangGraph. - **LangChain** (bottom layer, *framework*) — abstractions for models, tools, and the agent loop. Provider-agnostic, easiest to start with. - **LangSmith** (cross-cutting) — observability and evaluation platform. Framework-agnostic; always recommended alongside any of the above. Higher layers depend on lower ones, but you don't need to use lower layers directly. Deep Agents gives you LangGraph's durable execution without writing graph code. LangChain gives you models and tools without managing graph edges. </overview> --- ## Step 1 — Choose Your Tool <decision-table> Evaluate these conditions in order and stop at the first match: 1. If the task needs planning, file management across a long session, persistent memory, subagent delegation, or on-demand skills → **Deep Agents** 2. Else, if the task needs custom control flow (deterministic loops, branching logic) → **LangGraph** 3. Else, if it's a single-purpose agent with a fixed set of tools → **LangChain** (`create_agent` function) 4. Else, if it's a pure model call, retrieval pipeline, or simple prompt chain with no agent loop → **LangChain** (direct model / chain) This is your **layer**. BUT you are not done: later in Step 4, you MUST load the layer-specific skill before writing any agent code. </decision-table> --- ## Tool Profiles <langchain-profile> ### LangChain — agent framework **Best for:** - Single-purpose agents with a fixed tool set - RAG pipelines and document Q&A - Model calls, prompt templates, structured output **Not ideal when:** - The agent needs to plan across many steps or manage large context - Control flow is conditional, iterative, or parallel - State must persist across sessions All LangChain agents use `create_agent(model, tools=[...])`. </langchain-profile> <langgraph-profile> ### LangGraph — agent runtime **Best for:** - Custom control flow — deterministic loops, reflection cycles, parallel fan-out - Complex workflows combining deterministic and agentic steps - Human-in-the-loop with precise interrupt and resume points - State that must survive failures or span long sessions **Not ideal when:** - You want planning, file management, and subagent delegation out of the box (use Deep Agents instead) - The workflow is simple enough for a straight tool loop All LangGraph graphs use `StateGraph(State)` with explicit nodes, edges, and conditional edges. </langgraph-profile> <deep-agents-profile> ### Deep Agents — agent harness **Best for:** - Long-running tasks that require planning and decomposition - Agents that read, write, and manage files across a session - Delegating subtasks to specialized subagents - Persistent memory across sessions - Loading domain-specific skills on demand **Not ideal when:** - The task is simple enough for a single-purpose agent - You need precise hand-crafted control over every graph edge (use LangGraph directly) All Deep Agents use `create_deep_agent(model, tools=[...])`. </deep-agents-profile> --- ## Mixing Layers <mixing-layers> The tools are layered, so they can be combined in the same project. Common patterns: - **Deep Agents orchestrator → LangGraph subagent** — when the main agent needs planning and memory but one subtask requires a deterministic graph. - **LangGraph graph wrapped as a tool or subagent** — when a specialized pipeline (e.g. RAG, reflection loop) is called by a broader agent. A compiled LangGraph graph can be registered as a named subagent inside Deep Agents — the orchestrator delegates to it via the `task` tool without knowing its internal structure. LangChain tools and retrievers work freely inside both LangGraph nodes and Deep Agents tools. </mixing-layers> --- ## Step 2 — Set Environment Variables Always set these for observability. These are the current LangSmith env var names. Copy them as-is. OLDER NAMES NO LONGER WORK. <environment-variables> LANGSMITH_API_KEY=<your-key> LANGSMITH_TRACING=true LANGSMITH_PROJECT=<project-name> </environment-variables> Model-provider and tool-specific keys (`ANTHROPIC_API_KEY`, `OPENAI_API_KEY`, `TAVILY_API_KEY`, etc.) depend on your stack — set them as needed. --- ## Step 3 — How the Docs Work <docs> All documentation lives at **docs.langchain.com**, organized into two top-level sections: - **OSS** — LangChain, LangGraph, Deep Agents. Python (`/oss/python/`) and TypeScript (`/oss/javascript/`) trees in parallel. - **LangSmith** — observability, evaluation, deployment, prompt engineering. Each product has its own page tree: overview → quickstart → how-to guides → reference. ### Canonical landing pages Start here rather than tree-searching from root (swap `python` → `javascript` for TypeScript): - **LangChain** — `/oss/python/langchain/overview` - **LangGraph** — `/oss/python/langgraph/overview` - **Deep Agents** — `/oss/python/deepagents/overview` - **LangSmith** — `/langsmith/home` (no language split) ### Accessing docs in an agent context **If the LangChain Docs MCP server is connected** (`mcp__docs-langchain__*` tools are available), query it directly: ``` tree /oss/python -L 2
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit a78b2e2
git clone https://github.com/langchain-ai/langchain-skills git -C langchain-skills checkout a78b2e2257e3
The author documents no install command, so this uses the repository directly. Our verdict covers commit a78b2e2257e3 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
a78b2e2257e3
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/langchain-ai/ecosystem-primer/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
obra/superpowers
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions…
obra/superpowers
Use when you have a spec or requirements for a multi-step task, before touching code
obra/superpowers
Use when starting any conversation - establishes how to find and use skills, requiring skill invocation before ANY response including clarifying questions
Add this badge to your README
[](https://modelsatlas.com/skills/langchain-ai/ecosystem-primer/)
<a href="https://modelsatlas.com/skills/langchain-ai/ecosystem-primer/"><img src="https://modelsatlas.com/skills/langchain-ai/ecosystem-primer/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about ecosystem-primer
Is ecosystem-primer safe to install?
What can ecosystem-primer access on my machine?
How current is this page?
Sources
- github.com/langchain-ai/langchain-skills/tree/main/config/skills — the audited source at commit a78b2e2257e3 and every finding aboveObserved · 26 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- Is ecosystem-primer safe to install?
- What can ecosystem-primer access on my machine?
- How current is this page?