ovphysx-usd-authoring
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of the
usd-corelibrary via pip. This is a well-known, industry-standard package for OpenUSD development. - [DYNAMIC_EXECUTION]: Python examples in the skill demonstrate the registration of codeless schemas using
Plug.Registry().RegisterPlugins. These plugins are sourced from the vendor-providedovphysxmodule, which is a standard initialization step for the extension. - [INDIRECT_PROMPT_INJECTION]: The skill outlines a process for loading and simulating external USD files, which serves as an ingestion point for data that could contain instructions if the files are from an untrusted source.
- Ingestion points: USD files loaded into
ovstageas documented in SKILL.md. - Boundary markers: There are no specific boundary markers or instructions to ignore embedded content within the USD data.
- Capability inventory: The skill utilizes capabilities including shell execution, file writing, and plugin loading.
- Sanitization: No validation or sanitization procedures for the input USD files are described.
Audit Metadata