LlamaIndex
Framework for agentic RAG and document workflows with query engines, tools and workflow primitives for knowledge agents.
Delv Safety Grade: B
Score 73/100 · assessed 2026-04-18
LlamaIndex is a well-established open-source framework from a legitimate organisation with strong community backing and active development. The project maintains excellent transparency with comprehensive documentation, active GitHub presence, and clear versioning through PyPI. However, as an agentic RAG framework, it inherently requires broad permissions: filesystem access for document ingestion, network calls to external LLM APIs, environment variable access for API keys, and potential shell execution through tool integrations. The framework's extensibility means actual permissions depend heavily on which connectors and tools users enable. Supply chain is solid via standard PyPI distribution, though the large dependency tree and plugin ecosystem introduce some surface area. No known security incidents. The freemium model with LlamaCloud adds a commercial backing layer.
Green flags
- Established organisation with active maintenance and 30k+ GitHub stars
- Comprehensive documentation and transparent development on GitHub
- Standard PyPI distribution with semantic versioning
- No known security incidents or credential leaks
- Commercial backing through LlamaCloud provides sustainability
Red flags
- Broad filesystem access required for document ingestion and indexing
- External LLM API calls require environment secrets (OpenAI, Anthropic keys)
- Plugin ecosystem means actual permissions vary widely by configuration
- Large dependency tree increases supply chain surface area
Permissions requested
Pricing
Platforms
Review
Pick LlamaIndex if you are building RAG or document agents and want production-ready primitives without reinventing retrieval. Skip it if you need broad autonomy or hate writing code.
Good at
- Excellent data connectors for common sources like Notion, Google Drive, Slack
- Query engines handle retrieval strategies and reformulation without custom logic
- Workflow API for chaining steps like summarisation and multi-document comparison
- Free tier is generous, open-source version works for most solo projects
- More focused and faster to production than LangChain for RAG use cases
Watch out
- Not a true autonomous agent, you define the pipeline yourself
- Assumes you understand retrieval strategies, learning curve is steep
- Chunking breaks on messy or inconsistent documents, no automatic cleanup
- Docs are thorough but dense, not beginner-friendly
- Narrow focus means limited use outside search and retrieval workflows
Use cases
- RAG pipelines
- document agents
- enterprise search