urdf
Warn
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The
scripts/gen_urdf/cli.pyscript utilizesimportlib.util.spec_from_file_locationandmodule_spec.loader.exec_moduleto dynamically load and execute arbitrary Python files passed as command-line arguments. This mechanism allows the execution of any code contained within the target scripts. - [COMMAND_EXECUTION]: The skill provides a CLI interface in
scripts/gen_urdf/cli.pydesigned to execute local Python scripts as part of the robot model generation workflow. - [REMOTE_CODE_EXECUTION]: The
_load_generator_modulefunction inscripts/gen_urdf/cli.pymodifiessys.pathat runtime to include the directory of the script being executed and the current working directory. This increases the risk of module shadowing or the accidental execution of malicious code if untrusted files are present in those directories.
Audit Metadata