action-and-event-data-generation
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill coordinates workflows that ingest YAML configuration files used by LLM-backed components.
- Ingestion points: Configuration files (e.g.,
my_scene.yaml) passed toactor_sdg.pyor the AEDG application. - Boundary markers: The instructions do not specify explicit delimiters or 'ignore embedded instructions' warnings for the natural language processing components.
- Capability inventory: The skill enables shell script execution (
./isaac-sim.action_and_event_data_generation.sh) and Python-driven simulation runs. - Sanitization: The skill correctly utilizes
yaml.safe_loadto prevent arbitrary code execution during the parsing of configuration files, but it does not account for natural language instruction injection within the data content.
Audit Metadata