ifc-qto-extraction

BENIGN in purpose and data flow: the skill’s file access, local execution, and report generation match BIM quantity takeoff. Main concern is supply-chain trust: it relies on proprietary publisher-supplied converter executables, so security risk is elevated despite no signs of credential theft, exfiltration, or malicious intent.