skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/capacity-planning/Gen Agent Trust Hub
capacity-planning
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data files, which presents a surface for potential indirect prompt injection where malicious instructions could be embedded in project data.
- Ingestion points: The skill accepts project data, file paths, and parameters via CSV, Excel, and JSON formats as specified in instructions.md.
- Boundary markers: The instructions lack clear delimiters or specific guidance for the agent to treat input data as non-instructional content.
- Capability inventory: The skill is configured with filesystem permissions in claw.json, which allows the agent to interact with the local environment.
- Sanitization: No explicit sanitization or content validation for the ingested data is defined in the instruction set.
Audit Metadata