skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/weather-api/Gen Agent Trust Hub
weather-api
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches weather data from the Open-Meteo API (api.open-meteo.com). This is a well-known public service for meteorological data.- [INDIRECT_PROMPT_INJECTION]: The skill processes external data files to generate workability assessments, which represents a potential ingestion surface.
- Ingestion points: The assistant is instructed in instructions.md to accept project data, parameters, and file paths (CSV, Excel, JSON) from users.
- Boundary markers: The instructions do not define specific delimiters or 'ignore instructions' tags to isolate user-provided content from the agent's core instructions.
- Capability inventory: The skill uses requests for network operations and pandas for data handling and potential file exports.
- Sanitization: The implementation instructions mandate validating all inputs before processing, providing a basic level of protection against malformed or malicious data.
Audit Metadata