skills/datadrivenconstruction/ddc_skills_for_ai_agents_in_construction/safety-compliance-checker/Gen Agent Trust Hub
safety-compliance-checker
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The Python implementation in SKILL.md consists of standard classes and methods for safety rule verification (PPE, fall protection, excavation) and report generation using the pandas library. No suspicious code execution patterns or remote calls were found.
- [SAFE]: The skill requests 'filesystem' permissions in claw.json, which is necessary for its stated purpose of reading data files and exporting compliance reports as described in the instructions and skill documentation.
- [PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection by processing external data formats (CSV, Excel, JSON) as specified in instructions.md. \n
- Ingestion points: Data files (CSV, Excel, JSON) provided by the user as input for safety compliance checks. \n
- Boundary markers: None identified in the prompt instructions to separate data content from agent instructions. \n
- Capability inventory: Filesystem access for reading/writing files and data processing via the pandas library. \n
- Sanitization: No specific sanitization or validation logic for external data content is visible in the provided snippets. As this data ingestion is a core functional requirement of the skill's purpose, it is documented as an inherent architectural risk without escalating the security verdict.
Audit Metadata