skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/warranty-tracker/Gen Agent Trust Hub
warranty-tracker
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided data in multiple formats, creating a surface for indirect instructions to be passed to the agent.
- Ingestion points: The
instructions.mdfile explicitly directs the agent to accept and process data from CSV, Excel, and JSON files. - Boundary markers: There are no explicit instructions or delimiters defined to ensure the agent ignores natural language instructions that might be embedded within the data rows of processed files.
- Capability inventory: The skill possesses filesystem write capabilities through the
export_to_excelmethod inSKILL.mdand maintains internal state for warranties and documents. - Sanitization: The skill lacks validation or sanitization logic to verify that the content of the processed files matches the expected schema and does not contain adversarial instructions.
Audit Metadata