pai-run-policy
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for running a command-line tool (
physicalai run) to execute AI policies on a robot. - [DYNAMIC_EXECUTION]: The workflow involves dynamically instantiating objects and loading plugins (e.g.,
SO101,UVCCamera) via configuration files using theclass_pathandinit_argspatterns. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of YAML configuration files and exported model policies, which serves as a potential attack surface for indirect instructions.
- Ingestion points:
runtime.yamlconfiguration file,calibration.jsonfile, and policy model exports located in./exports/act_policy. - Boundary markers: The instructions rely on the user manually validating configuration fields against a provided schema but do not specify automated sanitization for the inputs.
- Capability inventory: The skill facilitates file system reads, hardware I/O via serial ports (
/dev/ttyACM0) and video devices (/dev/video0), and command execution through thephysicalaiCLI. - Sanitization: The instructions recommend a validation loop using fake robots and dry runs to ensure safety before interacting with physical hardware.
Audit Metadata