expanso-parse-logs

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses run.sh to execute the expanso command-line tool, which is required for running the defined data pipeline.
  • [COMMAND_EXECUTION]: The test.sh script executes local syntax checks using yq or python3's yaml.safe_load to ensure the pipeline configuration is valid.
  • [EXTERNAL_DOWNLOADS]: Documentation points to official Expanso resources and suggests installing the vendor's CLI tool via clawhub.
  • [DATA_EXFILTRATION]: The pipeline is designed to transmit processed log data to an external analytics endpoint. This endpoint is configurable via the ANALYTICS_ENDPOINT environment variable, defaulting to a local service.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from an HTTP server. It implements data transformation and privacy measures (SHA-256 hashing of client IPs) before routing the data to its destination.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 05:45 AM
Security Audit — agent-trust-hub — expanso-parse-logs