skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/rag-construction/Gen Agent Trust Hub
rag-construction
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external construction documents which constitutes a surface for indirect prompt injection.
- Ingestion points: Document content is ingested via the
Documentclass and processed by theadd_documentmethod withinSKILL.md. - Boundary markers: The
querymethod inSKILL.mdbuilds a context string from search results using simple index labeling (e.g.,[Source 1: Title]) but lacks explicit instruction-ignore delimiters to prevent the agent from obeying instructions embedded within the document text. - Capability inventory: The skill includes logic for text chunking, embedding generation (simulated), vector similarity search, and answer generation across
SKILL.mdandinstructions.md. - Sanitization: No sanitization, content filtering, or validation of the ingested document content is performed before the data is interpolated into the agent's context.
Audit Metadata