openusd-validate
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs legitimate infrastructure tasks related to OpenUSD asset management.\n- [SAFE]: All imported modules and external library references (dcc-mcp-core, dcc_mcp_openusd) are consistent with the author's namespace ('dcc-mcp').\n- [SAFE]: No indicators of prompt injection, data exfiltration, or unauthorized command execution were found in the scripts or metadata.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external USD stage files which represent an attack surface, but the risk is managed by vendor libraries.\n
- Ingestion points:
stage_fileparameter intools.yaml.\n - Boundary markers: None defined for the processed file content.\n
- Capability inventory: Allowed tools include Bash, Read, and Write;
package_usdz.pyperforms file writes.\n - Sanitization: Content processing is delegated to the
dcc_mcp_openusdruntime library.
Audit Metadata