omniverse-ui-widgets-app
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for creating a Python virtual environment and installing packages using pip. These are standard development procedures for the intended purpose of the application.
- [EXTERNAL_DOWNLOADS]: The skill references the official NVIDIA-Omniverse GitHub repository and PyPI for package acquisition. All packages listed (such as ovui-widgets-app and ovrtx) align with the vendor's own namespace and infrastructure.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a data ingestion surface.
- Ingestion points: The application processes external USD files passed via command line arguments in SKILL.md.
- Boundary markers: None explicitly documented in the setup instructions.
- Capability inventory: The Python application performs file reading and rendering operations as defined in SKILL.md.
- Sanitization: Not explicitly defined in the installation instructions; the skill relies on the underlying ovui and OpenUSD runtimes for data handling.
Audit Metadata