project-setup-c
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides CMake configuration that retrieves SDK binary archives from the official NVIDIA-Omniverse repository on GitHub.
- [REMOTE_CODE_EXECUTION]: The CMake FetchContent module is utilized to download and integrate external binary dependencies into the project build environment.
- [COMMAND_EXECUTION]: The documentation includes standard commands for project configuration and compilation, such as cmake build and execution steps.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read local template files and code snippets (e.g., from the examples/c/ directory) to generate project files, creating an ingestion surface for external content.
- Ingestion points: Code snippets and template files located in the project's examples directory.
- Boundary markers: No specific markers are defined to isolate the ingested snippet content from the agent's instructions.
- Capability inventory: The agent uses Read and Grep tools to access templates and performs subsequent project file creation.
- Sanitization: The skill does not implement validation or sanitization for the content extracted from template files.
Audit Metadata