thatopen-impl-bcf
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes BCF files, which are external data sources that could theoretically contain malicious instructions designed to influence the agent's behavior during data processing.\n
- Ingestion points: The
bcfTopics.load(data)method inSKILL.mdandreferences/methods.mdis the primary entry point for external binary data.\n - Boundary markers: The component includes a
strictmode in its configuration to validate imported data properties against allowed sets, providing a layer of control over incoming metadata.\n - Capability inventory: The skill's capabilities are restricted to BIM data management (creating topics, capturing 3D views) and local file export via Blob objects. It does not possess capabilities for arbitrary command execution or unauthorized network communication.\n
- Sanitization: The implementation relies on established industry-standard libraries, specifically
jszipfor container handling andfast-xml-parserfor XML processing, to ensure structured data is handled correctly.\n- [SAFE]: The skill demonstrates secure development practices, including explicit resource disposal patterns and the use of GUIDs for cross-referencing objects to prevent memory leaks. All external dependencies are well-known, legitimate packages used within the intended architectural domain.
Audit Metadata