skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/productivity-analyzer/Gen Agent Trust Hub
productivity-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources which is then interpreted by the agent.
- Ingestion points: The
import_from_dataframemethod inSKILL.mdand the input guidelines ininstructions.mdallow data from CSV, Excel, and JSON files to enter the agent's context. - Boundary markers: The skill does not define explicit delimiters or instructions for the agent to ignore potentially malicious commands embedded within site conditions or activity descriptions.
- Capability inventory: The skill possesses filesystem permissions to write Excel reports (
export_analysisinSKILL.md) and performs automated data calculations. - Sanitization: The implementation uses type conversion for numeric values but does not sanitize or escape text-based project data before presenting it to the agent.
Audit Metadata