project-setup-c

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download the ovstream binary archive from https://github.com/NVIDIA-Omniverse/ovstream/releases. This targets the official repository of the vendor, nvidia-omniverse, and is a standard functional requirement for SDK integration.
  • [COMMAND_EXECUTION]: The skill provides instructions for building and running C++ and CUDA applications using cmake and shell execution. These commands are necessary for the skill's primary purpose of project setup and development.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a template for project scaffolding, which introduces a surface for indirect instructions if user-provided names or paths are processed.
  • Ingestion points: Project name, file names, and path variables used in CMake configuration templates (SKILL.md).
  • Boundary markers: Absent; the instructions rely on the agent's ability to interpolate variables into the provided boilerplate.
  • Capability inventory: File system access (writing configuration) and command execution (building the project).
  • Sanitization: Not explicitly present, as the templates are designed for standard developer environment initialization.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 02:49 PM
Security Audit — agent-trust-hub — project-setup-c