skills/impertio-studio/thatopen-claude-skill-package/thatopen-syntax-ifc-loading/Gen Agent Trust Hub
thatopen-syntax-ifc-loading
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configures the application to fetch the web-ifc WASM parsing engine from the well-known unpkg.com CDN. This is a standard and documented procedure for web-based BIM applications using the ThatOpen engine.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data.
- Ingestion points: IFC file data is ingested via ifcLoader.load() and ifcImporter.process() as shown in SKILL.md and references/examples.md.
- Boundary markers: None explicitly defined for the IFC data stream.
- Capability inventory: The skill uses @thatopen/components to interact with Three.js scenes and perform 3D rendering.
- Sanitization: Content is parsed by the web-ifc WASM engine which validates the IFC schema before conversion to fragments.
- [SAFE]: The code samples provided follow best practices for the ThatOpen framework, including proper setup and cleanup of WASM memory, and no malicious command execution or data exfiltration patterns were detected.
Audit Metadata