bonsai-impl-clash

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is focused on technical documentation for BIM (Building Information Modeling) workflows. Analysis across all 10 threat categories shows no evidence of malicious patterns.
  • [COMMAND_EXECUTION]: The skill uses standard Blender Python API calls (bpy.ops.bim.*) and invokes the ifcclash module via standard CLI syntax. These operations are essential for the skill's primary function of performing geometric collision analysis and are confined to the local execution environment.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill manages IFC (Industry Foundation Classes) files, JSON results, and BCF (BIM Collaboration Format) files. All file operations are localized to user-specified paths for the purpose of coordination reporting, with no unauthorized network transmission detected.
  • [EXTERNAL_DOWNLOADS]: No automated downloads or remote script execution patterns were found. Referenced documentation URLs point to official, well-known project sites for IfcOpenShell and Bonsai.
  • [PROMPT_INJECTION]: The instructions are purely instructional and provide guidance on tool usage. There are no attempts to override agent safety protocols or hijack the conversation flow.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 01:55 AM