simready-foundation-conform-fet-010-standard
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs local processing of USD and image files to derive display colors, which is consistent with its stated purpose as a conformance tool.
- [SAFE]: The project uses well-known Python packages (usd-core, numpy, Pillow) from standard registries for asset manipulation and image processing.
- [SAFE]: The bundled script includes safety mechanisms, such as clamping values to valid ranges and avoiding overwriting manual user edits by checking custom metadata stamps.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a data ingestion surface by processing external USD files and texture images. The author_display_color.py script reads assets using Usd.Stage.Open and Image.open (ingestion points), performs area-weighted averaging in linear light, and saves the resulting values using stage.Save (capability inventory). The implementation includes sanitization by clamping components to the [0, 1] range and rejecting non-finite values; however, it does not employ specific boundary markers or delimiters for the processed content.
Audit Metadata