calibrate-metropolis-camera
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data through parameters like place_info and scene_root, which are then included in the generated calibration.json file. Ingestion points: User-supplied arguments to scripts/calibrate_camera.py (place_info, scene_root). Boundary markers: Not explicitly present in the data flow. Capability inventory: Local file writing and stage modification via the Isaac Sim API. Sanitization: The script performs basic validation on place_info format and ensures scene_root corresponds to a valid USD prim path.
- [DYNAMIC_EXECUTION]: The script dynamically enables the required isaacsim.sensors.rtx.calibration extension at runtime using the Omniverse Kit extension manager, which is a standard initialization pattern for Isaac Sim scripts.
- [COMMAND_EXECUTION]: The script creates the specified output directory on the local filesystem using os.makedirs. It includes a safety check to reject non-local URIs (e.g., Nucleus or cloud paths) for the output destination.
Audit Metadata