expanso-encryption-patterns
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements field-level encryption for PII, payment, and health data (GDPR/PCI/HIPAA) using standard cryptographic methods. It does not contain any malicious code or hidden backdoors.
- [COMMAND_EXECUTION]: The
run.shscript executes theexpansoCLI to process the data pipeline. This is the intended behavior for the skill as a template for the Expanso platform. - [EXTERNAL_DOWNLOADS]: The documentation references the installation of the
expansoCLI tool. As the tool is the primary component provided by the vendor (expanso-io), this is a standard and expected dependency. - [DATA_EXFILTRATION]: The
pipeline.yamlconfiguration defines an HTTP server listening on0.0.0.0:8080. This is used to receive data for local encryption. The processed data is written to local JSONL files and is not exfiltrated to external third-party domains.
Audit Metadata