openusd-project

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructions and scripts do not contain any malicious patterns, obfuscation, or unauthorized access attempts.
  • [COMMAND_EXECUTION]: The tools create_project and snapshot_stage execute Python code that leverages internal vendor libraries (dcc_mcp_core, dcc_mcp_openusd). These actions are scoped to standard project management tasks such as directory creation and stage file copying.
  • [INDIRECT_PROMPT_INJECTION]: The skill exposes an ingestion surface for external data via the project_dir, stage_file, and output_dir parameters in tools.yaml. These inputs are used for file system operations performed by scripts/create_project.py and scripts/snapshot_stage.py. Capability inventory includes directory creation and file management consistent with the skill's primary purpose. Sanitization and boundary markers are not explicitly defined in the skill instructions but are managed by the internal library logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 06:49 AM