Agent skill · security · datadrivenconstruction
security-review-construction
Security review checklist for construction software systems. Use when building integrations, APIs, data pipelines, or dashboards for construction projects.
Why this skill is useful
Adds executable scripts for securely handling financial and BIM data, along with specific security checklists tailored for construction software systems.
What it needs
Requires python3 installed locally. About 6k tokens when loaded. Last updated 2026-02-14. 265 stars on the source repository.
What this skill does
Security Review Skill for Construction Systems This skill ensures all construction software systems follow security best practices, protecting sensitive project data, financial information, and business intelligence. When to Activate Building ERP/BIM system integrations Creating construction dashboards Handling cost/financial data Building document management systems Creating APIs for field data collection Integrating with external platforms (Procore, PlanGrid, etc.) Working with subcontractor/vendor data Processing payment applications Construction-Specific Security Concerns 1. Financial Data Protection Financial Data Checklist [ ] Cost estimates encrypted at rest [ ] Margin/markup data not exposed in logs [ ] Payment information tokenized [ ] Historical pricing protected from competitors [ ] Bid amounts secured until opening 2. BIM/CAD Data Security BIM/CAD Checklist [ ] IFC/RVT files encrypted at rest [ ] Access logged for audit trail [ ] Time-limited download links [ ] Version control with access tracking [ ] No design data in error messages 3. Subcontractor/Vendor Data Vendor Data Checklist [ ] Insurance/bonding information encrypted [ ] Bank details protected (PCI compliance) [ ] Tax IDs masked in UI (show last 4 digits only) [ ] Pricing history access-controlled [ ] Certificate expiration notifications secure 4. Field Data Collection Security Field Data Checklist [ ] GPS data validated for reasonableness [ ] Photo timestamps verified [ ] File integrity checks (hashing) [ ] User authentication for submissions [ ] Offline data sync secured 5. CWICR Database Security CWICR Checklist [ ] Tiered access control implemented [ ] API rate limiting per user/tier [ ] Data exports watermarked [ ] Bulk download restrictions [ ] Competitor access monitoring 6. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills datadrivenconstruction/security-review-construction