expanso-rate-limiting
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized behaviors were detected across the skill files. The skill correctly implements its stated purpose of rate limiting streaming data.
- [COMMAND_EXECUTION]: The
run.shscript executes theexpansocommand-line utility to run the defined pipeline. This is the expected and documented operational behavior for this skill. - [DATA_EXFILTRATION]: The
pipeline.yamlconfiguration defines data movement between Kafka brokers and topics. This represents standard data routing and does not involve the collection or transmission of sensitive local environment data or credentials to unauthorized destinations. - [REMOTE_CODE_EXECUTION]: The
test.shscript usesyaml.safe_load()in a Python subprocess to validate the pipeline configuration. This is a security best practice that prevents arbitrary code execution during the parsing of YAML files.
Audit Metadata