i4h-workflow-dataset-convert
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones a software repository from 'https://github.com/isaac-for-healthcare/i4h-workflows' to the user's home directory. This repository contains the core logic for the dataset conversion and is associated with the vendor's Isaac for Healthcare project.
- [COMMAND_EXECUTION]: The skill executes several shell commands, including 'git clone', directory creation ('mkdir'), symlinking ('ln'), and the invocation of a local conversion script ('run.sh'). These operations are standard for a data conversion and organization workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external HDF5 recording files. While this creates a theoretical surface for indirect prompt injection if file metadata were maliciously crafted, the risk is negligible due to the specialized binary nature of HDF5 files and the skill's specific focus on robotic data transformation.
Audit Metadata