skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/historical-cost-analyzer/Gen Agent Trust Hub
historical-cost-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard Python libraries (pandas, numpy, scipy) to perform statistical analysis on construction project data. No arbitrary command execution, network exfiltration, or credential access was detected.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied historical project data (e.g., Excel or CSV files). While this creates a surface for indirect prompt injection if the data contains malicious instructions, the skill uses structured data processing and statistical functions which mitigate direct execution risks. The agent instructions emphasize data normalization and benchmarking, which are consistent with the skill's stated purpose.
- [COMMAND_EXECUTION]: The skill does not perform any dangerous shell commands. The operations are limited to data manipulation and statistical reporting within a Python environment.
Audit Metadata