rvt-to-ifc

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose and local file access are proportionate to RVT->IFC conversion, and same-org evidence supports the claimed publisher. But it requires a proprietary unverifiable executable with inconsistent naming and no visible checksum/signature path, so install trust is materially weaker than the benign functionality suggests.

Confidence: 83%Severity: 78%
Audit Metadata
Analyzed At
Sep 18, 2026, 01:08 AM
Package URL
pkg:socket/skills-sh/datadrivenconstruction%2Fddc_skills_for_ai_agents_in_construction%2Frvt-to-ifc%2F@d29227bd211eb4211f564ef70b062319cc6284d13154a4a777e5f50e9ab3804a