Skills
Navigate
skills/expanso-io/skills.expanso.io/expanso-http-webhook-ingestion/Gen Agent Trust Hub

expanso-http-webhook-ingestion

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script run.sh executes the expanso command-line utility to start the webhook ingestion server as defined in pipeline.yaml.
  • [EXTERNAL_DOWNLOADS]: The documentation and scripts instruct the user to install the expanso CLI tool via clawhub. These tools are consistent with the skill vendor's ecosystem.
  • [PROMPT_INJECTION]: The skill sets up an HTTP server endpoint (0.0.0.0:8080/webhook) to ingest external data. This ingestion surface could be exploited for indirect prompt injection if the routed data is later processed by an LLM without proper sanitization.
  • Ingestion points: The pipeline.yaml file defines a server listening for HTTP POST requests.
  • Boundary markers: The skill does not implement specific boundary markers or 'ignore' instructions for the ingested payload.
  • Capability inventory: The skill utilizes run.sh to trigger the expanso CLI for processing data.
  • Sanitization: The pipeline configuration includes basic validation mappings to ensure required fields like event are present in the incoming JSON.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 05:45 AM
Security Audit — agent-trust-hub — expanso-http-webhook-ingestion