cost-estimation-resource

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests construction norms and resource prices provided as structured data.
  • Ingestion points: The load_resources_from_df and load_work_items_from_df methods in SKILL.md accept DataFrames containing resource and norm data.
  • Boundary markers: Data is processed as structured inputs; however, no specific delimiters or ignore instructions are present.
  • Capability inventory: The skill can perform calculations and write files to the local system (SKILL.md).
  • Sanitization: Input data used in calculations is cast to float types, providing a basic level of validation for numeric fields.
  • [COMMAND_EXECUTION]: The skill implements filesystem write operations to export construction estimates.
  • Evidence: The export_to_excel method in SKILL.md uses pd.ExcelWriter with the openpyxl engine.
  • Context: This functionality is consistent with the filesystem permission requested in claw.json and represents the core output mechanism of the cost estimation tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:20 PM