expanso-db2-to-bigquery

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses environment variables (e.g., ${DB2_USER}, ${DB2_PASSWORD}) to manage database credentials in the pipeline.yaml configuration, adhering to standard secret management practices.
  • [SAFE]: The data pipeline includes a dedicated processor for masking account numbers (keeping only the last 4 digits and creating a SHA-256 hash), demonstrating a focus on data privacy and compliance during migration.
  • [SAFE]: Shell scripts (run.sh, test.sh) are used for legitimate utility purposes such as validating YAML syntax and invoking the vendor's command-line interface.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 05:44 AM
Security Audit — agent-trust-hub — expanso-db2-to-bigquery