skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/cwicr-value-engineering/Gen Agent Trust Hub
cwicr-value-engineering
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate data analysis tasks for construction cost management without any detected malicious patterns or security vulnerabilities.
- [EXTERNAL_DOWNLOADS]: The documentation references an official GitHub repository (
datadrivenconstruction/OpenConstructionEstimate-DDC-CWICR) for project resources and data. This aligns with the skill author's identity and is a standard practice for providing datasets. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided construction data in various formats (CSV, Excel, JSON). Although this constitutes an ingestion surface for external content, the risk is minimized as the skill focuses on numerical data processing and structured Excel reporting, which are less susceptible to instruction-based attacks.
Audit Metadata