i4h-workflow-dataset-convert
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones the
i4h-workflowsrepository fromhttps://github.com/isaac-for-healthcare/i4h-workflows. This repository is maintained by the Isaac for Healthcare team at NVIDIA, which matches the skill's authoring organization. - [REMOTE_CODE_EXECUTION]: Code from the cloned repository is executed using the
uv runcommand as part of the core dataset conversion and inspection workflow. - [COMMAND_EXECUTION]: The skill utilizes several shell commands for repository management and dataset processing, including
git clone,git rev-parse,cd,mkdir, anduv run. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from HDF5 recordings and associated Scene/embodiment manifest files, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: Metadata including workflow details, scene descriptions, embodiment labels, and task instructions are read from external recordings and manifest files.
- Boundary markers: Absent; the instructions do not define delimiters or provide warnings to the agent to ignore instructions embedded within the processed data.
- Capability inventory: The skill allows the agent to execute shell commands via
gitanduvand perform local file system operations. - Sanitization: No evidence of input sanitization or strict schema validation for the textual content of the manifest files was found.
Audit Metadata