expanso-fan-out-pattern
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill files. The skill correctly implements a data routing pattern using a specific tool configuration.
- [COMMAND_EXECUTION]: The provided shell scripts (
run.shandtest.sh) are used for legitimate administrative tasks.run.shexecutes theexpansocommand to start the pipeline, andtest.shperforms syntax validation of the configuration file using common tools likeyqorpython3. - [EXTERNAL_DOWNLOADS]: The documentation points to the official
expanso.iodomain for further resources and mentionsclawhubfor tool installation, which is standard practice for the vendor's ecosystem. - [DATA_EXFILTRATION]: The pipeline is designed to transmit data to external services (AWS S3, Kafka, Elasticsearch). This behavior is the primary purpose of the skill and is securely implemented by referencing environment variables for endpoints and credentials rather than hardcoding sensitive information.
Audit Metadata