isaac-sim-installation
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation metadata and standalone binary archives from NVIDIA's official documentation and download domains (docs.isaacsim.omniverse.nvidia.com and downloads.isaacsim.nvidia.com). These operations use HTTPS and include MD5 integrity verification.
- [COMMAND_EXECUTION]: Utilizes the
subprocessmodule to execute system discovery commands (e.g.,nvidia-smi,docker --version), manage virtual environments, and run official NVIDIA installation scripts. The implementation features a security-hardened environment filter (_SAFE_ENV_KEYS) that prevents the leakage of host credentials or sensitive environment variables to these child processes. - [REMOTE_CODE_EXECUTION]: Downloads and extracts software packages from trusted NVIDIA sources. The skill includes explicit safety boundaries, such as requiring user approval for installation plans and EULA acceptance before any execution occurs, and specifically prohibits launching the main application.
- [SAFE]: The skill demonstrates a high level of security maturity, incorporating defensive coding patterns such as input validation for URL schemes, safe path handling in zip extraction, and explicit provenance verification for Python packages.
Audit Metadata