usd-pipeline

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard Python scripts using the pxr (USD) and isaacsim libraries for processing 3D assets. The logic focuses on spatial measurement (bounding boxes), shader identification, and scene graph manipulation.
  • [COMMAND_EXECUTION]: The documentation mentions using Xvfb and the isaac-sim.sh launcher to run scripts in a headless environment. This is a standard operational procedure for NVIDIA Omniverse simulations and does not involve arbitrary command injection or malicious intent.
  • [INDIRECT_PROMPT_INJECTION]: While the skill ingests data by scanning directory trees for USD files (.usd, .usda, .usdc), the processing is limited to reading scene metadata and performing spatial calculations. There are no exfiltration paths (network) or high-privilege shell executions that could be exploited by malicious asset content.
  • [REMOTE_CODE_EXECUTION]: The skill relies on local library imports (pxr, omni.usd, isaacsim) typical of the Omniverse ecosystem. No remote script downloads or piped bash executions were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 02:58 PM
Security Audit — agent-trust-hub — usd-pipeline