houdini-solaris-usd
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The Python scripts
scripts/karma_rop.py,scripts/test_karma_rop.py, andscripts/test_stage_digest.pyutilize thesubprocess.runfunction to interact with local system and Houdini-specific binaries. scripts/karma_rop.pycallsnvidia-smito check GPU memory andhoiiotoolto extract image statistics.- The test scripts invoke
hython(Houdini's Python interpreter) to run automated verification tests on generated scenes. - These calls are implemented using list-based arguments without the shell execution flag, preventing common command injection vulnerabilities.
- [DYNAMIC_EXECUTION]: The
scripts/test_karma_rop.pyfile includes a multi-line string containing Python code used to dynamically generate a Houdini scene during unit testing. This code is executed by thehythoninterpreter. This is a legitimate and standard pattern for creating reproducible test environments in Houdini development workflows.
Audit Metadata