isaac-sim-ros-workspaces
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Pixi binary and its associated SHA256 checksum from the official prefix-dev GitHub repository. The download is verified against the checksum before the binary is extracted and installed.
- [COMMAND_EXECUTION]: Utilizes various system and build tools including git, docker, colcon, rosdep, and pixi to manage repository content and build ROS workspaces across Linux and Windows environments.
- [PRIVILEGE_ESCALATION]: Employs sudo for installing missing system dependencies via apt-get and for initializing rosdep. The scripts include logic to detect non-interactive environments, preventing the agent from hanging on password prompts by failing gracefully with manual remediation steps.
- [DYNAMIC_EXECUTION]: The custom build workflow executes a script named build_ros.sh located within the cloned repository. This is an expected behavior for building custom ROS interfaces from the project source.
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided repository URLs, branches, and filesystem paths. To mitigate risks associated with untrusted path inputs, the scripts implement safety checks that refuse to perform destructive 'clean re-clone' operations on critical paths such as the filesystem root or the user's home directory.
Audit Metadata