c3d-mass-haul
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: No network operations or sensitive file access patterns were detected. The code snippets primarily interact with the local AutoCAD/Civil 3D database and output messages to the internal command-line interface.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any external downloads or package installations. It relies solely on the local Civil 3D .NET API.
- [COMMAND_EXECUTION]: While the skill uses
SendStringToExecuteto trigger built-in AutoCAD commands likeCreateMassHaulDiagramandGenerateQuantitiesReport, these are hardcoded, standard internal operations used when direct API access is unavailable. There is no user-controlled input flowing into these commands. - [OBFUSCATION]: The content is provided in clear text. No Base64 encoding, zero-width characters, or homoglyph-based obfuscation were found.
- [PROMPT_INJECTION]: The instructions are strictly technical and do not contain any attempts to override agent behavior or bypass safety guidelines.
- [INDIRECT_PROMPT_INJECTION]: The skill documents how to process Civil 3D engineering data (surfaces, alignments, corridors). While this is an ingestion surface, the operations are limited to reading local drawing data and invoking static internal commands, posing no significant risk.
Audit Metadata