omniverse-cad-to-usd
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
usd-convert-cadpackage from the Python Package Index (PyPI) or the official NVIDIA package registry (pypi.nvidia.com). These are well-known and vendor-affiliated sources. - [COMMAND_EXECUTION]: The skill utilizes shell commands to manage Python virtual environments and execute the
usd-convert-cadconversion utility as documented inSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes external CAD and 3D files provided by the user, representing a potential attack surface if the converter encounters maliciously crafted files.
- Ingestion points: Input files specified via the
-i <input>parameter in the conversion commands described inSKILL.md. - Boundary markers: No specific boundary markers are defined for the content of the processed CAD files.
- Capability inventory: The skill uses
ShellandReadtools to execute conversion logic and access files. - Sanitization: The skill relies on the internal parsing logic of the
usd-convert-cadtool to handle file integrity.
Audit Metadata