i4h-workflow-scene-edit
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones the i4h-workflows repository from GitHub to establish the local development environment. The default source is a vendor-associated repository.
- Evidence:
git clone "$I4H_WORKFLOWS_REPO_URL" "$ROOT"inSKILL.md. - [COMMAND_EXECUTION]: The skill executes several shell commands and local scripts to manage the lifecycle of the simulation and authoring session.
- Evidence: Execution of
./run.sh,./local-agent/bridge.sh, andscripts/live_scene_edit.pyto interact with the environment. - [DYNAMIC_EXECUTION]: The skill uses a Python bridge to send commands to a running Isaac Sim instance on port 8226 and generates code updates to 'bake' live changes into persistent source files.
- Evidence: Use of
isaacsim_send.pyand the coding agent's logic to patch Scene and manifest templates based on live snapshots. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and modifies existing workflow files, including Python scripts and YAML manifests, based on external instructions.
- Ingestion points:
target workflow,Scene Python,scene manifest,embodiment manifest, andtask manifestsas specified inSKILL.md. - Boundary markers: No explicit prompt boundaries or delimiters are used for the content being processed.
- Capability inventory: Includes repository cloning, local script execution, and multi-file source code modification.
- Sanitization: Incorporates static validation using
ruffandlint, as well as visual verification steps within the simulator before final persistence.
Audit Metadata