expanso-enforce-schema

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses standard data processing patterns for validation and error routing. All external resources and CLI tools referenced (expanso, docs.expanso.io) belong to the verified author 'expanso-io'.
  • [COMMAND_EXECUTION]: The shell scripts run.sh and test.sh execute the expanso CLI tool and standard utilities (yq, python3) for syntax validation and pipeline execution. These are appropriate for the skill's stated purpose of managing data pipelines.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external HTTP POST requests. However, it implements strong boundary markers by validating the input against a JSON schema (sensor-schema.json) and using structured data mapping, which mitigates risks associated with processing untrusted data.
  • [DATA_EXFILTRATION]: The pipeline sends validated data to an analytics endpoint and writes failures to a local log file. The analytics endpoint is configurable via the ANALYTICS_ENDPOINT environment variable, which is a standard operational practice for data pipelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 05:44 AM
Security Audit — agent-trust-hub — expanso-enforce-schema