thatopen-core-web-ifc
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the parsing of IFC (Industry Foundation Classes) files, which are external data sources.
- Ingestion points: The skill documentation uses
ifcApi.OpenModel(data)andifcApi.OpenModelFromCallback()to load IFC data from external buffers. - Boundary markers: No specific delimiters or instructions to ignore potential instructions embedded within the IFC metadata or property sets are mentioned.
- Capability inventory: The skill enables deep querying of model properties, spatial hierarchies, and geometry extraction via the
web-ifcengine. - Sanitization: No explicit sanitization or validation of the IFC content is described before processing.
- [DYNAMIC_EXECUTION]: The skill documents the initialization and use of a WebAssembly (WASM) engine for IFC parsing.
- Evidence: The skill uses
ifcApi.SetWasmPath()andifcApi.Init()to load and execute theweb-ifc.wasmmodule. This is the primary and necessary functionality of the library to provide native-speed parsing in JavaScript environments.
Audit Metadata