skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/qto-report/Gen Agent Trust Hub
qto-report
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied BIM/CAD data in various formats (CSV, Excel, JSON, IFC) which creates a surface for indirect injection.
- Ingestion points: The skill uses
pd.read_csv,pd.read_excel, andifcopenshell.openinSKILL.mdto load external datasets. - Boundary markers: While the instructions in
instructions.mddirect the agent to validate inputs, there are no specific prompt delimiters or instructions to ignore commands embedded within the model data. - Capability inventory: The skill utilizes filesystem write capabilities (
to_excel,to_csv,to_json) and data processing libraries. - Sanitization: There is no explicit logic for sanitizing or escaping string data extracted from BIM models before it is presented or processed further.
- [EXTERNAL_DOWNLOADS]: The skill references external resources for documentation and tooling.
- It links to the vendor's website
datadrivenconstruction.iofor methodology and book references. - It references
ifcopenshell.orgfor BIM data extraction utilities. - [COMMAND_EXECUTION]: The skill's configuration in
SKILL.mdspecifies requirements for system binaries includingpython3and theifcopenshellenvironment.
Audit Metadata