skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/sensor-data-aggregator/Gen Agent Trust Hub
sensor-data-aggregator
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data sources such as CSV, Excel, and JSON files, which introduces a potential surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: Data enters the system via
ingest_batchandingest_readingmethods, as well as through user-provided files mentioned ininstructions.md. - Boundary markers: The provided instructions do not specify explicit delimiters or "ignore instructions" wrappers for the ingested data.
- Capability inventory: The skill uses internal logic for statistical analysis and reporting. The
claw.jsonfile requestsfilesystempermissions, allowing the agent to read and write files. - Sanitization: The Python implementation performs numerical validation (physical limit checks and Z-score anomaly detection), but lacks specific text sanitization if string metadata from readings were to be interpolated into agent prompts.
- [SAFE]: The external domain
datadrivenconstruction.iois the official homepage for the authordatadrivenconstructionand is used legitimately for documentation and project identification.
Audit Metadata