skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/estimate-builder/Gen Agent Trust Hub
estimate-builder
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied construction data, such as project descriptions, WBS codes, and cost items, to generate formatted reports.
- Ingestion points: User-provided project metadata and line items provided via chat (instructions.md).
- Boundary markers: Not explicitly defined in the instructions.
- Capability inventory: Filesystem write access used specifically for exporting estimates to Excel files (SKILL.md).
- Sanitization: The Python implementation performs type casting for numeric values (quantity, unit_cost) and includes basic validation for non-negative values in the
validate()method. - [SAFE]: The skill's primary functionality consists of standard mathematical operations and data structure management. All code is transparently provided in Python and does not include network operations, obfuscation, or privilege escalation attempts.
Audit Metadata