generate-incident-config

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a utility for generating and validating domain-specific configuration files (YAML) for the isaacsim.replicator.incident extension. It operates entirely offline and does not require an active Isaac Sim session or GPU access.
  • [COMMAND_EXECUTION]: The provided Python script scripts/starter_iri_config.py performs standard filesystem operations such as reading extension TOML files to resolve versions and schemas. It uses yaml.safe_load() and yaml.safe_dump() for configuration processing, following security best practices.
  • [EXTERNAL_DOWNLOADS]: The documentation references external sources such as NVIDIA Isaac Sim's extscache and the metrosim repository, but it does not perform any automated downloads or execution of remote code. All operations are local to the provided workspace or the user-specified $ISAAC_SIM_DIR.
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns were found. The script is designed to be an offline helper utility.
  • [PRIVILEGE_ESCALATION]: No privilege escalation or high-permission commands (e.g., sudo) are used.
  • [DATA_EXFILTRATION]: The skill does not access sensitive system paths or credentials. It specifically works with simulated event data (topple, fire, spill) and configuration parameters like seeds and report directories.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 02:57 PM
Security Audit — agent-trust-hub — generate-incident-config