expanso-aggregate-time-windows

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns detected. The skill uses standard Expanso CLI tools and configuration for time-windowed data aggregation.
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and example sites at docs.expanso.io and examples.expanso.io. These are official vendor domains belonging to the skill author (expanso-io) and are considered safe for providing context and documentation.
  • [COMMAND_EXECUTION]: Shell scripts run.sh and test.sh execute the expanso CLI tool and local YAML validation using yq or python3. These operations are transparent, serve the stated purpose of running and testing the pipeline, and do not involve suspicious command construction or obfuscation.
  • [DATA_EXFILTRATION]: The pipeline.yaml defines an HTTP output to ${ANALYTICS_ENDPOINT}. By default, this points to localhost:8080, and it is intended for transmitting aggregated metrics to a designated analytics service as part of the primary skill function.
  • [CREDENTIALS_UNSAFE]: The skill uses environment variables (e.g., ${KAFKA_BROKER_1}, ${ANALYTICS_ENDPOINT}) for configuration, which is a recommended security practice for managing sensitive information in production pipelines. No hardcoded secrets were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 05:44 AM
Security Audit — agent-trust-hub — expanso-aggregate-time-windows