skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/rvt-to-excel/Gen Agent Trust Hub
rvt-to-excel
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runto invoke theRvtExporter.exebinary for file conversion and data extraction tasks. - [EXTERNAL_DOWNLOADS]: Documentation in
SKILL.mdprovides a reference to the vendor's official GitHub repository (github.com/datadrivenconstruction/...) for downloading the requiredRvtExporter.exeexecutable. - [INDIRECT_PROMPT_INJECTION]: The skill processes BIM data from external Revit files which are subsequently read into the agent's context, representing a potential surface for indirect injection via element metadata.
- Ingestion points: Data is ingested through the
read_elementsmethod inSKILL.md, which loads converted Excel data viapandas. - Boundary markers: No explicit delimiters or safety instructions are implemented to isolate ingested data from the agent's core instructions.
- Capability inventory: The skill has the ability to execute the vendor binary and write to the local filesystem (Excel and CSV outputs).
- Sanitization: There is no evidence of text sanitization for the extracted BIM parameters before they are processed by the agent.
Audit Metadata