expanso-normalize-timestamps
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
run.shandtest.shto execute the Expanso pipeline and validate configuration. These scripts perform expected operations without privilege escalation or dangerous parameters. - [EXTERNAL_DOWNLOADS]: The skill references the
expansotool, which is provided by the vendor. There are no downloads from untrusted third-party sources. - [CREDENTIALS_UNSAFE]: Configuration for Kafka brokers and topics is managed via environment variables (e.g.,
${KAFKA_BROKERS}). This follows best practices for secret management. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface via Kafka topics in
pipeline.yaml. While this allows entry of untrusted data, the logic is constrained to timestamp normalization, which lacks high-privilege capabilities or triggers for agent instruction override. Evidence chain: (1) Ingestion points: Kafkainputinpipeline.yaml. (2) Boundary markers: Absent. (3) Capability inventory: Mapping processors for timestamp parsing inpipeline.yaml. (4) Sanitization: Regex format detection and explicit parsing methods inpipeline.yaml.
Audit Metadata