Weekly RudderStack governance audit in Slack
Every Monday morning, get a risk-ranked review of your RudderStack transformations posted straight to your data-governance Slack channel.
RudderStack
Slack BotEngineeringOperationsDaily DigestsNotifications & AlertsAI ReportsBuild me an agent workflow that runs a weekly governance audit of all my RudderStack transformations and posts a risk-ranked digest to Slack.
Trigger: cron, every Monday at 9:00am America/New_York.
Integrations: rudderstack and slackbot. Use the slackbot integration (not the user slack one) so the digest is posted by a bot identity and survives team changes.
What the agent should do on each run:
1. Call List Transformations on RudderStack to get every published transformation in the workspace. The response already includes the destinations connected to each transformation; keep that list, it is the blast radius signal.
2. For each transformation, call Get Transformation to pull the latest published code, and List Transformation Versions to see the revision history so it can compute how long the transformation has been untouched (use the most recent revision's createdAt).
3. Evaluate each transformation against four concrete checks:
(a) PII exposure. Does the code read any of email, phone, ip, raw user_id, traits.*, or context.ip and pass them downstream without hashing, masking, redacting, or stripping? If yes, flag which field and where.
(b) Error handling. Does the code wrap risky operations (JSON.parse, network calls, property access on possibly-undefined nested objects) in try/catch or guards, or does it let exceptions bubble up and drop the event silently? Flag missing handling around specific risky lines.
(c) Staleness. Is the most recent revision 90 or more days old? If yes, include the age in days.
(d) Destination blast radius. How many destinations is this transformation connected to (count the destinations array from the List Transformations response)? Higher count = higher impact if the transformation misbehaves.
4. Rank transformations by concrete findings, not an invented severity score. A transformation that leaks PII into many destinations outranks one with only a stale revision. Order: PII findings first (more destinations breaks ties), then missing error handling on high-fan-out transformations, then staleness.
5. Post a single Slack message via Send a Message on the slackbot integration to the configured channel (default #data-governance, make it a setup field). Format the message with Slack mrkdwn (single asterisks for bold, not double). Shape it as a ranked list, worst offenders on top. For each transformation include: the transformation name, the specific issue in one short sentence, the connected-destination count, and a one-line suggested fix (e.g. "hash email with sha256 before forwarding", "wrap JSON.parse in try/catch and return event unchanged on failure", "review and re-publish; last revision 142 days old"). Keep the message under 40 lines; if there are more findings, truncate and add a final line like "+12 more findings, expand the audit window to see them."
Important: this workflow is read-only. Do not call Update Transformation, Create Transformation, or Delete Transformation. No code in RudderStack is ever modified by this workflow.
Setup fields the user should configure once: the Slack channel to post to, the staleness threshold in days (default 90), and an optional list of additional field paths to treat as PII beyond the defaults.
What does this prompt do?
- Reviews every RudderStack transformation in your workspace once a week and ranks the riskiest ones first.
- Flags transformations that pass personal data like email, phone, IP, or raw user IDs downstream without masking, hashing, or stripping.
- Calls out missing error handling and transformations that have not been updated in 90 or more days.
- Highlights blast radius by showing how many destinations each transformation feeds, so a risky change near the top of the list is impossible to miss.
- Posts a single clean digest to a Slack channel you choose, with the transformation name, the issue, and a one-line suggested fix for each finding.
What do I need to use this?
- A RudderStack account with permission to read transformations.
- A Slack workspace and the channel you want the weekly digest posted to.
- An idea of what counts as personal data at your company, so the agent flags the right fields. Defaults cover the common ones.
How can I customize it?
- Change the schedule. Monday at 9am Eastern is the default, but you can pick any day, time, or cadence.
- Pick a different Slack channel, or send the digest as a direct message instead.
- Tune what counts as risky. Adjust the personal-data fields, the staleness threshold, or the destinations you care most about.
FAQs
Does this workflow change any of my RudderStack code?
What kinds of issues does it look for?
How are findings ranked?
Can I send it somewhere other than Slack?
What if I have hundreds of transformations?
Related templates
Every logo, photo, video cut and ad export in one searchable grid, with previews, campaign tags and rights expiry dates at a glance.
Twice a day we spot the people clicking your pricing and demo pages, create a follow-up task for their owner, and post a ranked recap to Slack.
One board showing every dashboard and Look with its folder, owner and favorite count, so you can find dead content and retire it safely.
Watch every live room on one screen, remove disruptive guests, start recordings and end stuck sessions without anyone opening a terminal.
Every Monday we find leads who never bought, research a real reason to reach out, and send a short personal email instead of another check in.
See the exact hours your chat queue backs up and customers give up waiting, then plan next week's shifts before it happens again.
Stop hoping your data pipelines are still safe.
Connect RudderStack and Slack once, and get a ranked governance review every Monday morning without lifting a finger.