cwicr-quantity-matcher

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes BIM element descriptions and quantities from user-supplied files, creating a potential surface for indirect prompt injection where instructions in the data could influence the assistant's behavior during analysis.
  • Ingestion points: match_quantities method in SKILL.md (processing the bim_data DataFrame).
  • Boundary markers: The skill does not implement delimiters or specific instructions to ignore content within the data fields.
  • Capability inventory: The skill has declared filesystem permissions and includes methods for writing results to Excel files.
  • Sanitization: No sanitization is performed on descriptive text fields before they are used in similarity matching or potential assistant summaries.
  • [SAFE]: The skill references an official GitHub repository (github.com/datadrivenconstruction/OpenConstructionEstimate-DDC-CWICR) which belongs to the verified author.
  • [SAFE]: The implementation relies on well-known and standard Python data science libraries, including pandas and numpy.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 01:08 AM