惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

S
Schneier on Security
A
Arctic Wolf
S
Security Affairs
O
OpenAI News
SecWiki News
SecWiki News
TaoSecurity Blog
TaoSecurity Blog
H
Heimdal Security Blog
T
Threat Research - Cisco Blogs
Hacker News: Ask HN
Hacker News: Ask HN
N
News | PayPal Newsroom
Google Online Security Blog
Google Online Security Blog
C
Cisco Blogs
The Hacker News
The Hacker News
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
C
CXSECURITY Database RSS Feed - CXSecurity.com
P
Privacy International News Feed
V
Vulnerabilities – Threatpost
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
酷 壳 – CoolShell
酷 壳 – CoolShell
H
Hacker News: Front Page
T
Tenable Blog
T
The Exploit Database - CXSecurity.com
Recent Commits to openclaw:main
Recent Commits to openclaw:main
Spread Privacy
Spread Privacy
人人都是产品经理
人人都是产品经理
www.infosecurity-magazine.com
www.infosecurity-magazine.com
V2EX - 技术
V2EX - 技术
L
LINUX DO - 最新话题
The GitHub Blog
The GitHub Blog
博客园 - 三生石上(FineUI控件)
T
The Blog of Author Tim Ferriss
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
V
Visual Studio Blog
The Cloudflare Blog
N
News and Events Feed by Topic
量子位
Google DeepMind News
Google DeepMind News
Application and Cybersecurity Blog
Application and Cybersecurity Blog
L
LINUX DO - 热门话题
P
Palo Alto Networks Blog
Stack Overflow Blog
Stack Overflow Blog
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
Attack and Defense Labs
Attack and Defense Labs
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Hacker News - Newest:
Hacker News - Newest: "LLM"
Apple Machine Learning Research
Apple Machine Learning Research
The Register - Security
The Register - Security
Microsoft Security Blog
Microsoft Security Blog
Know Your Adversary
Know Your Adversary
Webroot Blog
Webroot Blog

The Register - Special Features

23andMe inherits lawsuit over 'disturbing' DNA data breach Troops’ phones gave away location data to foreign adversaries Qualcomm picks bad time to pitch a $300 laptop platform AI agents get their own phone directory built atop DNS Carnival confirms ShinyHunters cruised off with 6M customer records after April breach Google engineer accused of turning Year in Search secrets into Polymarket payday Are we human? India's cyber agency sets clock at 12 hours to tackle exploited bugs as AI turns up the heat Broadcom gets early start on WiFi 8 with next-gen wireless routing kit Are we human? Microsoft Excel champ proves he still has the formula Anthropic co-founder hallucinates ghost in the machine Anthropic co-founder hallucinates ghost in the machine NASA plans Moon Base buildout with rovers, drones, cargo landers MyPillow must decide whether to be firm or soft as ransomware crims demand pay Starship shows it can deploy satellites, but Moon mission clock still ticks Huawei's chip law looks less like Moore and more like marketing Experts pour cold borscht on Farage's Russian hack claim Logitech unveils a cushioned mouse for all-day use AI eyes scanning for bugs create a worrisome Linux security trend A Russian speaker and jailbroken Gemini went on a hacking spree and emptied at least one MAGA victim's crypto wallets AI datacenter boom collides with US grid reality Media giant settles for $930k amid user-snooping allegations AT&T sues to ditch Cali copper phone lines to save billions FBI warns of Kali365 as device code phishing soars Techie claims Trump Mobile website was leaking thousands of people's data BOFH: Vibe-coded solutions arrive for problems nobody has Dems slam Trump for making cybersecurity hold out the tin cup while splurging on ballroom and Jan. 6 'slush fund' Google explains how it will infuse ads into AI answers AI is getting pricey, but relief is coming, but not for you Deus ex machina: Half of US Christians trust AI's spiritual advice Attackers spill plaintext passwords of 46k Myspace93 users after 2021 breach Apple adds AI smarts to Voice Control, VoiceOver and Magnifier ahead of Accessibility Day Microsoft open-sources agentic AI safety tools OpenAI wants upfront cash for guaranteed AI capacity Fedora: Microsoft is all aboard, but Deepin is dumped Bye-bye, Gemini CLI; Google nudges devs toward Antigravity Plex appeal fades as Lifetime Pass jumps to $750 AI sackings reach New Zealand, which will use it to eject 14 percent of government staff Anthropic’s Stainless steal tightens grip on AI dev tooling Are we human? Google touts tokenmaxxing, huge capex, and AI agents at I/O America's top cyber-defense agency left a GitHub repo open with with passwords, keys, tokens – and incredibly obvious filenames America's top cyber-defense agency left a GitHub repo open with passwords, keys, tokens – and incredibly obvious filenames Shadow AI invades the workplace, up 4x in the last year Microsoft refreshes Surface for Business lineup, starts AI PC upsell at $1,499 Broadcom finds a VMware customer willing to stick around: London Stock Exchange 468k records allegedly stolen from Portugal’s postal carrier Baidu says the quiet part out loud – you can’t build AI infrastructure, so clouds can cash in Shai-Hulud copycat worm infects yet another npm package Uncle Sam's next big super might not use GPUs Are we human? Datacenters slurping up so much juice they boosted prices 75% in largest US energy market MPs want social media treated more like unsafe toys than harmless apps Cerebras’ wafer-scale AI bet delivers blockbuster IPO Nobody believes the 'criminals and scumbags' who hacked Canvas really deleted stolen student data Anthropic tosses agents into the API billing pool Jen Easterly, cybersecurity's 'relentless optimist,' hopes feds come back to RSAC next year Jen Easterly, cybersecurity's 'relentless optimist' Smooth criminals talking their way into cloud environments, Google says Voice phishing skyrockets as smooth crims talk their way in RSAC 2026: Uncle Sam backs out, AI agents everywhere RSAC 2026: Uncle Sam backs out, AI agents everywhere Decoding Nvidia's Groq-powered LPX and the rest of its new rack systems A closer look at Nvidia's Groq-powered LPX rack systems Nvidia slaps $20B Groq tech into massive new LPX racks to speed AI response time Nvidia slaps Groq into new LPX racks for faster AI response AI Burning Man happens next week – what to expect at Nvidia GTC 2026 Nvidia GTC 2026: What to expect at AI Burning Man Unaccounted-for AI agents are being handed wide access Unaccounted-for AI agents are being handed wide access Google to foist Gemini pane on Chrome users Google to foist Gemini pane on Chrome users Yes, you can build an AI agent – here's how, using LangFlow Clawdbot becomes Moltbot, but can’t shed security concerns Clawdbot becomes Moltbot, but can’t shed security concerns Gartner questions if Salesforce AI will stay all-you-can-eat Gartner questions if Salesforce AI will stay all-you-can-eat Claude supports MCP Apps, presents UI within chat window Claude supports MCP Apps, presents UI within chat window Cursor is better at marketing than coding Cursor is better at marketing than coding Feds skipping infosec industry's biggest conference, RSAC AI is rewriting how power flows through the datacenter All aglow about DCs, investors launch $300M at microreactor startup Radiant bags $300M-plus to commercialize its microreactors Why do bit barns keep bumping up our bills, Senators ask DC operators Senate trio questions DC operators over rising energy costs Building the AI factory datacenter Delays? What delays? Oracle insists its $300B cloud contract with OpenAI is on track Oracle insists its $300B contract with OpenAI is on schedule Salesforce willing to lose money on AI to lock in customers Salesforce willing to lose money on AI to lock in customers Galactic Brain space datacenter coming in 2027, pledges startup Aetherflux Galactic Brain space datacenter promised in 2027 Activist groups urge Congress to pause datacenter buildouts Activist groups urge Congress to pause datacenter buildouts Bezos-backed Unconventional AI addresses datacenter power Bezos-backed Unconventional AI addresses datacenter power AWS re:Invent keynote: Matt Garman bores, then thrills
How to build an AI agent using LangFlow
2026-01-29 · via The Register - Special Features

HANDS ON For all the buzz surrounding them, AI agents are simply another form of automation that can perform tasks using the tools you've provided. Think of them as smart macros that make decisions and go beyond simple if/then rules to handle edge cases in input data. Fortunately, it's easy enough to code your own agents and below we'll show you how.

Since ChatGPT made its debut in late 2022, literally dozens of frameworks for building AI agents have emerged. Of them, LangFlow is one of the easier and more accessible platforms for building AI agents.

Originally developed at Logspace before being acquired by DataStax, which was later bought by Big Blue, LangFlow is a low-code/no-code agent builder based on LangChain. The platform allows users to assemble LLM-augmented automations by dragging, dropping, and connecting various components and tools.

REG AD

In this hands-on guide, we'll be taking a closer look at what AI agents are, how to build them, and some of the pitfalls you're likely to run into along the way.

REG AD

The anatomy of an agent

Before we jump into building our first agent, let's talk about what comprises an agent.

At its most basic, an agent is composed of three main components: a system prompt, tools, and the model.

At its most basic, an agent is composed of three main components: a system prompt, tools, and the model.

In general, AI agents are going to have three main components, not counting the output/action they ultimately perform or the input/trigger that started it all.

  1. A system prompt or persona: This describes the agent's purpose, the tools available to it, and how and when they should be used in natural language. For example: "You're a helpful AI assistant. You have access to the GET_CURRENT_DATE tool which can be used to complete time or date related tasks."
  2. Tools: A set of tools and resources that the model can call upon to complete its task. This can be as simple as a GET_CURRENT_DATE or PERFORM_SEARCH function, or an MCP server that provides API access to a remote database.
  3. The Model: The LLM, which is responsible for processing the input data or trigger and using the tools available to it to complete a task or perform an action.

For more complex multi-step tasks, multiple models, tools, and system prompts may be used.

If you're using a Mac or PC, deploying LangFlow Desktop is as simple as downloading and running the installer from the LangFlow website

What you'll need:

  • To get started, you'll need a Mac, Windows, or Linux box to run the LangFlow Desktop.
  • Linux users will need to download and install Docker Engine first using the instructions here.
  • Access to an LLM and embedding model. We'll be using Ollama to run these on a local system, but you can just as easily open an OpenAI developer account and use their models as well.

If you're running Linux, you'll need to deploy the app as a Docker container. Thankfully this is a lot easier than it sounds. Once you've got the latest release of Docker Engine installed, you can launch the LangFlow server using the one-liner below:

After a few minutes, the LangFlow interface will be available at http://localhost:7860.

REG AD

Warning: If you're deploying the Docker container on a server that's exposed to the web, make sure to adjust your firewall rules appropriately or you might end up exposing LangFlow to the net.

sudo docker run -d -p 7860:7860 --name langflow langflowai/langflow:latest

Getting to know LangFlow Desktop

Opening LangFlow Desktop, you'll see that the application is divided into two sections: Projects and Flows. You can think of projects as a folder where your agents are stored.

Clicking "New Flow" will present you with a variety of pre-baked templates to get you started.

On the left side of LangFlow Desktop, we see a sidebar containing various first and third-party components that we'll use to assemble an agent.

LangFlow Desktop's homepage is divided into projects on the left and flows on the right.

LangFlow Desktop's homepage is divided into projects on the left and flows on the right.

Dragging these into the "Playground," we can then config and connect them to other components in our agent flow. 

In the case of the Language Model component shown here, you'd want to enter your OpenAI API key and select your preferred version of GPT. Meanwhile, for Ollama you'll want to enter your Ollama API URL, which for most users will be http://localhost:11434, and select a model from the drop down.

If you need help getting started with Ollama, check out our guide here.

REG AD

LangFlow's no-code interface allows you to build agents by dragging and dropping components from the side bar into a playground on the right.

LangFlow's no-code interface allows you to build agents by dragging and dropping components from the sidebar into a playground on the right.

Building your first agent

With LangFlow up and running, let's take a look at a couple of examples of how to use it. If you'd like to try these for yourself, we've uploaded our templates to a GitHub repo here.

In this example, we've built a relatively basic agent to analyze spreadsheets stored as CSVs, based on user prompts.

To help the agent understand the file's data structure, we've used the Type Convert and DataFrame Operations components to extract the dataset's schema and help the model understand the file's internal structure.

This, along with the full document's file path, is passed to a prompt template, which serves as the model's system prompt. Meanwhile, the user prompt is passed through to the model as an instruction.

Looking a bit closer at the prompt template, we see {DATA_HEADER} and {DATASET_FILEPATH} defined as variables. By placing these in {} we've created additional nodes to which we can connect our database schema and file path.

Beyond this, the system prompt contains basic information on how to service user requests, including instructions on how to call the PYTHON_DATA_PLAYGROUND Python interpreter, which we see just above the prompt template.

This Python interpreter is connected to the model's "tool" node and apart from allowlisting the Pandas and Math libraries, we haven't changed much more than the interpreter's slug and description.

This data analytics agent uses a Python interpreter and an uploaded CSV to answer user prompts

This data analytics agent uses a Python interpreter and an uploaded CSV to answer user prompts

Based on the information provided to it in the system and user prompts, the model can use this Python sandbox to execute code snippets and extract insights from the dataset.

If we ask the agent "how many monitors we sold," in the Langflow playground's chat, we can see what code snippets the model executed using the Python interpreter and the raw response it got back.

Obviously, this introduces some risk of hallucinations, particularly on smaller models. In this example, the agent is set up to analyze documents it hasn't seen before. However, if you know what your input looks like — for example, if the schema doesn't change between reports — it's possible to preprocess the data, like we've done in the example below.

LangFlow's Prompt Template enables multiple data sources to be combined into a single unified prompt.

LangFlow's Prompt Template enables multiple data sources to be combined into a single unified prompt.

With a couple of tweaks to the Python interpreter, we've created a custom component that uses Pandas to compare a new spreadsheet against a reference sheet. This way the model only needs to use the Python interpreter to investigate anomalies or answer questions not already addressed by this preprocessing script.

Models and prompts matter

AI agents are just automations that should, in theory, be better at handling edge cases, fuzzy logic, or improperly formatted requests.

We emphasize "in theory," because the process by which LLMs execute tool calls is a bit of a black box. What's more, our testing showed smaller models had a greater propensity for hallucinations and malformed tool calls.

The agent's data analytics functionality is achieved using a Python interpreter rather than relying on the model to make sense of the CSV on its own.

The agent's data analytics functionality is achieved using a Python interpreter rather than relying on the model to make sense of the CSV on its own.

Switching from a locally-hosted version of OpenAI's gpt-oss-120b to GPT-5 Nano or Mini, we saw a drastic improvement in the quality and accuracy of our outputs. 

If you're struggling to get reliable results from your agentic pipelines, it may be because the model isn't well suited to the role. In some cases, it may be necessary to fine tune a model specifically for that application. You can find our beginner's guide to fine tuning here.

Along with the model, the system prompt can have a significant impact on the agent's performance. The same written instructions and examples you might give an intern on how to perform a task are just as useful for guiding the model on what you do and don't want out of it.

As you can see, to answer our question, the model generated and executed a Python code snippet to extract the relevant information using Pandas

As you can see, to answer our question, the model generated and executed a Python code snippet to extract the relevant information using Pandas

In some cases, it may make more sense to break up and delegate a task to different models or system prompts in order to minimize the complexity of each task, reduce the likelihood of hallucinations, or cost optimize by having lower cost models tackle easier pieces of the pipeline.

Next steps

Rather than relying on the model to execute the right code every time, this example uses a modified Python interpreter to preprocess the data of two CSVs or Excel files before passing it to the model for review

Rather than relying on the model to execute the right code every time, this example uses a modified Python interpreter to preprocess the data of two CSVs or Excel files before passing it to the model for review

Up to this point, our examples have been triggered by a chat input and returned a chat output. However, this isn't strictly required. You could set up the agent to detect new files in a directory, process them, and save its output as a file.

LangFlow supports integrations with a wide variety of services that can be extended using agentic protocols or custom components written in Python. There's even a Home Assistant tie-in if you want to build an agent to automate your smart home lights and gadgets.

Speaking of third-party integrations, we've hardly scratched the surface of the kinds of AI-enhanced automation that are possible using frameworks like LangFlow. In addition to the examples we looked at here, we highly recommend checking out LangFlow's collection of templates and workflows.

Once you're done with that, you may want to explore what's possible using frameworks like Model Context Protocol (MCP). Originally developed by Anthropic, this agentic protocol is designed to help developers connect models to data and tools. You can find more on MCP in our hands-on guide here.

And while you're at it, you may want to brush up on the security implications of agentic AI, including threats like prompt injection or remote code execution, and ensure your environment is adequately sandboxed before deploying them in production. ®