openusd-project
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and scripts do not contain any malicious patterns, obfuscation, or unauthorized access attempts.
- [COMMAND_EXECUTION]: The tools
create_projectandsnapshot_stageexecute Python code that leverages internal vendor libraries (dcc_mcp_core,dcc_mcp_openusd). These actions are scoped to standard project management tasks such as directory creation and stage file copying. - [INDIRECT_PROMPT_INJECTION]: The skill exposes an ingestion surface for external data via the
project_dir,stage_file, andoutput_dirparameters intools.yaml. These inputs are used for file system operations performed byscripts/create_project.pyandscripts/snapshot_stage.py. Capability inventory includes directory creation and file management consistent with the skill's primary purpose. Sanitization and boundary markers are not explicitly defined in the skill instructions but are managed by the internal library logic.
Audit Metadata