isaac-sim-installation
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses subprocess calls to run installation scripts and compatibility checks. A whitelist-based environment filtering mechanism is used to prevent the leakage of sensitive host credentials to these subprocesses.\n- [EXTERNAL_DOWNLOADS]: Binaries and packages are downloaded from official NVIDIA domains (nvidia.com and nvcr.io), which are recognized as trusted sources. The skill enforces HTTPS for all downloads.\n- [REMOTE_CODE_EXECUTION]: The skill downloads and executes scripts from trusted repositories for installation and warmup. It includes security checks to prevent path traversal vulnerabilities during the extraction of binary archives.\n- [DYNAMIC_EXECUTION]: Shell commands for environment setup and validation are dynamically constructed using secure helpers. Python package installation is verified to ensure distributions originate from authorized NVIDIA sources.\n- [SAFE]: The skill incorporates robust security controls, including transport security, checksum verification, and secret isolation. No malicious patterns were detected.
Audit Metadata