calibrate-metropolis-camera
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied prim paths and configuration metadata which serves as an ingestion point for potentially untrusted data that could influence the agent's behavior.
- Ingestion points: The parameters
scene_root,camera_parent_prim_path, andplace_infoinscripts/calibrate_camera.pyare supplied by the user at runtime. - Boundary markers: Absent; the skill relies on the underlying Isaac Sim Kit APIs to handle these strings.
- Capability inventory: The skill can write calibration JSON and rendered images to the local filesystem and enable extensions via the
omni.kit.appextension manager. - Sanitization: The script validates that the
output_dirdoes not contain a URI scheme (e.g.,://) to prevent remote data exfiltration and verifies the format of theplace_infoconfiguration string.
Audit Metadata