usd-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard Python scripts using the
pxr(USD) andisaacsimlibraries for processing 3D assets. The logic focuses on spatial measurement (bounding boxes), shader identification, and scene graph manipulation. - [COMMAND_EXECUTION]: The documentation mentions using
Xvfband theisaac-sim.shlauncher to run scripts in a headless environment. This is a standard operational procedure for NVIDIA Omniverse simulations and does not involve arbitrary command injection or malicious intent. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests data by scanning directory trees for USD files (
.usd,.usda,.usdc), the processing is limited to reading scene metadata and performing spatial calculations. There are no exfiltration paths (network) or high-privilege shell executions that could be exploited by malicious asset content. - [REMOTE_CODE_EXECUTION]: The skill relies on local library imports (
pxr,omni.usd,isaacsim) typical of the Omniverse ecosystem. No remote script downloads or piped bash executions were found.
Audit Metadata