expanso-deduplicate-events
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard data transformation pipeline using the Expanso CLI.
- [COMMAND_EXECUTION]: The
run.shandtest.shscripts execute basic project commands (expanso run,yq,python3). These are standard development operations and do not include user-controlled input or dangerous patterns. - [DATA_EXFILTRATION]: The pipeline connects to a Kafka broker (
unique-eventstopic) and accepts HTTP POST requests. These are the primary functions of the skill and utilize environment variables (KAFKA_BROKERS) or standard local defaults. No unauthorized data transmission was detected. - [INDIRECT_PROMPT_INJECTION]: The skill processes JSON documents from an HTTP input. While it uses mapping logic to validate fields and generate keys, it does not pass this data to an LLM or any other agentic instruction processor, eliminating the risk of indirect injection.
Audit Metadata