expanso-fan-out-kafka

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the expanso CLI (a vendor-provided tool) to execute data pipelines and system utilities like yq or python3 for syntax validation.- [DATA_EXFILTRATION]: The pipeline configuration routes data to a local file in /tmp/events.jsonl and to remote Kafka brokers. These are the defined outputs for the data routing service and represent standard functionality.- [PROMPT_INJECTION]: The skill implements an HTTP listener that ingests external data. This is the primary function of the data pipeline.
  • Ingestion points: HTTP server endpoint at 0.0.0.0:8080/events defined in pipeline.yaml.
  • Boundary markers: None present in the boilerplate configuration.
  • Capability inventory: Local file system output and Kafka broker transmission.
  • Sanitization: No specific data sanitization is implemented in this basic template.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 05:45 AM
Security Audit — agent-trust-hub — expanso-fan-out-kafka