expanso-enforce-schema
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard data processing patterns for validation and error routing. All external resources and CLI tools referenced (
expanso,docs.expanso.io) belong to the verified author 'expanso-io'. - [COMMAND_EXECUTION]: The shell scripts
run.shandtest.shexecute theexpansoCLI tool and standard utilities (yq,python3) for syntax validation and pipeline execution. These are appropriate for the skill's stated purpose of managing data pipelines. - [INDIRECT_PROMPT_INJECTION]: The skill processes external HTTP POST requests. However, it implements strong boundary markers by validating the input against a JSON schema (
sensor-schema.json) and using structured data mapping, which mitigates risks associated with processing untrusted data. - [DATA_EXFILTRATION]: The pipeline sends validated data to an analytics endpoint and writes failures to a local log file. The analytics endpoint is configurable via the
ANALYTICS_ENDPOINTenvironment variable, which is a standard operational practice for data pipelines.
Audit Metadata