isaac-sim-web-viewer
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches prebuilt container images and metadata from NVIDIA NGC (nvcr.io and catalog.ngc.nvidia.com), which are official vendor resources.
- [EXTERNAL_DOWNLOADS]: Downloads Node.js from the NodeSource repository and fetches NVIDIA-hosted NPM packages during the Docker image construction phase.
- [COMMAND_EXECUTION]: Orchestrates the simulation environment using Docker Compose and manages filesystem permissions for container mounts.
- [COMMAND_EXECUTION]: Employs a dedicated Python utility for permission management that explicitly prevents symlink-based traversal and filesystem escapes using O_NOFOLLOW flags and directory descriptor walking.
- [INDIRECT_PROMPT_INJECTION]: Implements a log monitoring mechanism that ingests external application output to verify readiness; risk is mitigated by using strict regex and specific status markers.
Audit Metadata