skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/dwg-to-excel/Gen Agent Trust Hub
dwg-to-excel
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
DWGExporterclass inSKILL.mdutilizes thesubprocess.runfunction to execute a local binary namedDwgExporter.exe. This is the primary mechanism for the skill's data conversion functionality. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and interpret data from external DWG files after conversion to Excel databases.
- Ingestion points: The
read_entitiesmethod inSKILL.mdreads converted data from Excel files into pandas DataFrames, which are then processed by the agent. - Boundary markers: The instructions do not define specific delimiters for separating user data from system instructions during the analysis phase.
- Capability inventory: The skill possesses filesystem access permissions and the ability to execute the specific CLI tool via subprocess calls.
- Sanitization: There is no explicit sanitization or filtering demonstrated for the raw text content (such as text annotations or block attributes) extracted from the drawing files before it is processed by the assistant.
- [SAFE_EXTERNAL_RESOURCE]: The skill includes links to the author's official website and GitHub repository for project documentation and support. These references are consistent with the skill's stated purpose and originate from the vendor's own infrastructure.
Audit Metadata