test-assets
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches test assets from established and well-known repositories, including AWS Robotics' GitHub and the OpenRobotics Gazebo Fuel platform. These downloads are performed using pinned immutable revisions.
- [COMMAND_EXECUTION]: Instructions are provided to execute the included
fetch_assets.pyscript viauv runto synchronize the local asset cache. This is a standard management operation for the skill's purpose. - [SAFE]: The
fetch_assets.pyscript demonstrates high security awareness by implementing SHA-256 checksum verification for every download. Additionally, it performs strict path validation on archive members and uses the Pythontarfile'data' filter to protect against directory traversal and symlink attacks during extraction.
Audit Metadata