skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/cwicr-historical-cost/Gen Agent Trust Hub
cwicr-historical-cost
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the author's official GitHub repository (
github.com/datadrivenconstruction/OpenConstructionEstimate-DDC-CWICR) for technical resources and cost data documentation. - [COMMAND_EXECUTION]: The skill implementation utilizes Python 3 to perform data processing tasks. It performs standard file system operations, including reading cost data from Parquet files and exporting analysis reports to Excel (
.xlsx) and JSON formats. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external construction data provided by the user in various formats.
- Ingestion points: User-provided files (CSV, Excel, JSON) or direct input processed via the
CWICRHistoricalCostclass inSKILL.md. - Boundary markers: The
instructions.mdfile contains an explicit constraint to "Only use data provided by the user or referenced in the skill." - Capability inventory: The skill possesses
filesystempermissions to read and write project database records and export files. - Sanitization: The instructions mandate that the assistant must "Validate inputs before processing."
Audit Metadata