ai/langchain-py/SKILL.md
Build and maintain production-grade LangChain Python systems (LangChain 1.2.x baseline) with create_agent, middleware, tools, structured output, and multi-agent architectures (subagents, handoffs, router, skills). Activate for Python agent design, debugging, migrations from older APIs, context engineering, and Tavily-backed web search integration.
npx skillsauth add aeondave/malskill langchain-pyInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Practical workflow for building reliable LangChain systems with correct 1.x APIs and strong multi-agent design.
create_agentAssume LangChain 1.2.x semantics unless user explicitly requests another version.
from langchain.agents import create_agentdynamic_prompt, wrap_model_call, wrap_tool_call)Command(update=...) for state updates in tools/handoffslanggraph.prebuilt.create_react_agent snippets as migration candidatesIf uncertain, load references/version-scope.md first.
When implementing handoffs:
Command.PARENT only when explicit parent-graph routing is required.Use Tavily as a focused retrieval/search tool, not as a blanket dependency for every agent.
max_results and depth bounded to control token/latency costs.include_domains, exclude_domains) for precision.Load references/tavily-integration.md for concrete patterns.
Load on demand:
references/version-scope.md — 1.2 scope, migration-critical rules, changelog highlightsreferences/multi-agent-patterns.md — pattern selection and tradeoffsreferences/handoffs-and-command.md — state-machine handoffs, Command, message validityreferences/subagents-supervisor.md — supervisor/subagent layering and information flowreferences/tavily-integration.md — LangChain + Tavily setup and practical constraintsreferences/api-cheatsheet.md — fast API checklist for create_agent, ToolRuntime, Commanddevelopment
White-box auditing methodology for AI-generated ('vibe-coded') applications. Focuses on modern stack misconfigurations (Supabase, Next.js, Vercel).
development
Hybrid AI/Deterministic SAST methodology for discovering zero-day vulnerabilities in source code. Orchestrates structural search with AI-driven data flow and sink validation.
development
Auth assessment: hardware/embedded methodology; UART/JTAG/SWD/SPI/I2C, firmware extraction, boot/debug paths, embedded OS evidence.
devops
Container methodology: Identifying containerization limits, Docker/K8s misconfigurations, and executing escapes to the host node.