skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/bim-clash-detection/Gen Agent Trust Hub
bim-clash-detection
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process BIM element data from external files, which represents a surface for indirect instructions to be introduced into the agent context.
- Ingestion points: Untrusted data is loaded via
pd.read_excelas defined inSKILL.mdand through user-provided files (CSV, Excel, JSON) mentioned ininstructions.md. - Boundary markers: The instructions do not specify the use of delimiters or provide explicit directives to the agent to ignore natural language instructions that might be contained within element property fields.
- Capability inventory: The skill's functions are restricted to spatial calculations, geometric intersection logic, and data summary generation. It does not contain any code for network operations, shell command execution, persistence, or sensitive file access.
- Sanitization: Basic input sanitization is performed during the element loading process in
SKILL.mdthrough explicit type casting (converting coordinates tofloatand identifiers tostr), which validates the structure of the incoming data.
Audit Metadata