Ifc Qto Extraction

PassAudited by ClawScan on May 10, 2026.

Overview

The skill matches its BIM quantity-takeoff purpose, but it needs local file access and may run external BIM converter tools on user-selected model files.

Use this skill with specific BIM model paths and trusted local converter tools only. BIM files can contain sensitive project information, so review outputs before sharing and validate quantities before relying on them for commercial decisions.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may read selected BIM files and create export files, which could expose project details if the wrong paths are provided.

Why it was flagged

The skill needs local file read/write access to process model files and produce QTO reports; this is expected for the purpose but should be kept to intended project paths.

Skill content
Filesystem permission required for reading BIM files and writing exports
Recommendation

Provide explicit model and output paths, prefer a project-specific folder, and review generated exports before sharing them.

What this means

If an untrusted or tampered converter executable is used, it could run code on the user's machine.

Why it was flagged

The documented workflow may execute a local converter executable. This is aligned with Revit quantity extraction, but it depends on the local tool being trusted.

Skill content
Revit conversion uses DDC RvtExporter CLI tool via subprocess
Recommendation

Use only trusted converter installations, verify the executable path, and do not let the agent download or run unknown converter binaries.

What this means

The safety and correctness of extraction depends partly on separately installed tools that are not verified by this skill package.

Why it was flagged

External tools/libraries are part of the workflow, but the package has no install spec or pinned dependency information in the provided metadata.

Skill content
IFC parsing uses IfcOpenShell (Python library, no external services)\n- Revit conversion uses DDC RvtExporter CLI tool via subprocess
Recommendation

Install IfcOpenShell and any DDC converter tools from trusted sources and keep versions documented for repeatable QTO results.