·
Last changedVersion:
This version passed the hardening gate. Hardening applied 5 targeted changes and preserved all other text. Classified findings before hardening: 1. Classified findings closed: 0. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 3. Review findings remaining: 8.
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Malicious Code & Command Execution | Command injection | Low | Open |
1 finding
Create a complete runnable blank Workflow without searching for an existing Workflow or booting Isaac Sim.
I4H_WORKFLOWS when set; otherwise use the current git root.laparoscopic-robotics, ultrasound-robotics, endoluminal-robotics, or hospital-automation-robotics.If the request does not identify a specialty, ask the user to choose one; do not infer a product category from the workflow name alone.
Run:
This is the only authoring utility that generates workflow-specific source. It rejects an existing public workflow id in any specialty before dry-run output or file creation. It writes the fixed empty templates that establish the design boundary; later scene and task code is written by the coding agent. Use --dry-run to preview its output, --description TEXT to customize the scene-manifest description, and --validate to run the focused static checks after creation. Do not combine --dry-run and --validate.
The script refuses to overwrite files and creates only:
The result contains a ground plane, dome light, no embodiment or declared robots, no task-specific objects or cameras, and one idle mode. Its contract test verifies durable Workflow and manifest invariants rather than asserting that the Scene stays blank, so later Scene, Task, and run-mode authoring does not require rewriting the test. Do not inspect robot assets, choose a policy, create Task manifests, load upstream Isaac Sim skills, or launch the simulator during blank creation.
| Command | Purpose | Arguments |
|---|---|---|
| Create the complete overwrite-safe blank Workflow |
|
Run only fast static checks:
When the Workflow already exists because it was created without --validate, run the equivalent checks directly:
--validate requires the workflow and Arena environments. It verifies the generated contract and the shared zero-DOF blank-scene runtime adapter without launching Isaac Sim. Do not run visible or dynamic validation unless the user explicitly requests it.
I4H_WORKFLOWS to the existing repository root.Require a writable root-level i4h-workflows checkout and Python 3.11 or newer. Static --validate also requires the workflow and Arena component environments.
This skill creates only the five-file idle scaffold. It does not add an embodiment, task behavior, policy, cameras, or task-specific assets, and it does not visibly validate the Scene.
Treat creation as the first stage of an incremental workflow:
i4h-workflow-scene-edit to add and visibly verify assets, robots, cameras, layout, and physics, then bake the confirmed Scene.The blank Workflow is intentionally useful before behavior exists: its shared idle Task opens the Scene for authoring, so a blank task manifest or implementation would add no capability.
Create a blank hospital-automation-robotics workflow named my_workflow. → generate my_workflow in the hospital automation specialty and run static validation.Make a new laparoscopic-robotics workflow called training_sandbox as fast as possible. Start blank. → generate the same five-file idle-only scaffold under training_sandbox in the laparoscopic specialty.Report the created id, five files, idle-only status, and static validation results. Do not commit unless explicitly asked.
Get started with chainctlchainctl skill install public/nvidia/i4h-workflow-create:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.chainreg.biz/public/github.com/nvidia/skills/i4h-workflow-create:latest
Apache-2.0
BENCHMARK.md
HARDENING.md
SKILL.md
evals/evals.json
skill-card.md
skill.oms.sig