skills/openaec-foundation/computational-design-day-delft-march-2026/ifcos-impl-validation/Gen Agent Trust Hub
ifcos-impl-validation
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of technical documentation and reference material for BIM (Building Information Modeling) validation workflows using the open-source IfcOpenShell ecosystem.
- [PROMPT_INJECTION]: No prompt injection or behavior override patterns were found. The 'Critical Warnings' section contains standard technical guidance for using the libraries efficiently (e.g., performance advice for EXPRESS WHERE rules).
- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or unauthorized network operations were detected. The skill operates on IFC and IDS files provided by the user.
- [COMMAND_EXECUTION]: Mentioned CLI commands (e.g.,
python -m ifcopenshell.validate) are standard usage patterns for the documented Python modules. No unauthorized shell execution or argument injection vulnerabilities were identified. - [REMOTE_CODE_EXECUTION]: No remote script downloads or dynamic code execution from untrusted sources are present. All dependencies (ifcos-syntax-api, ifcos-syntax-fileio) are vendor-owned resources associated with the author OpenAEC-Foundation.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external data (IFC and XML-based IDS files), the ingestion points (ifcopenshell.open, ifctester.open) are handled by established parsers with no path to dangerous code execution or system command interpolation.
Audit Metadata