skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/weather-impact-analysis/Gen Agent Trust Hub
weather-impact-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches weather forecast data from the official OpenWeatherMap API (api.openweathermap.org) using the requests library. This is a legitimate integration for the skill's documented purpose.
- [COMMAND_EXECUTION]: The skill utilizes Python and common data processing libraries including pandas and openpyxl to perform schedule optimization and export reports to the local file system.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process project data provided by users (such as CSV or Excel schedules), which creates a potential surface for indirect prompt injection. 1. Ingestion points: Project schedule data and activity sensitivity parameters are processed in SKILL.md via the analyze_schedule and generate_weather_report methods. 2. Boundary markers: The provided code does not implement explicit boundary markers or delimiters to isolate user-controlled data from instructions. 3. Capability inventory: The skill utilizes network communication and local file system writes. 4. Sanitization: Although the instructions.md file requires the agent to validate inputs, no specific sanitization or filtering logic is present in the Python implementation to mitigate malicious data content.
Audit Metadata