deepstream-run-mv3dt
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of shell commands to manage the application lifecycle, including
docker runwith high-privilege flags (--privileged,--net=host) andsudofor file ownership corrections and service management. - Evidence:
- Instructions in
references/sample-run.mdandreferences/custom-dataset.mdrequire explicit user approval before executing privileged Docker commands. - Scoped
sudo chowncommands are used to fix file ownership of generated output artifacts. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading the DeepStream repository and container images from NVIDIA's official sources. It also includes logic to fetch calibration data from a user-managed AutoMagicCalib service.
- Evidence:
SKILL.mdprovides instructions togit clone https://github.com/NVIDIA/DeepStream.git.references/setup.mdpulls thenvcr.io/nvidia/deepstream:9.1-triton-multiarchcontainer image.references/amc-calibration-handoff.mdusescurlto download a results zip file from a configurableAMC_BASE_URL.- [PROMPT_INJECTION]: The skill contains specific instructions and evaluation cases to ensure the agent refuses malicious requests such as credential exfiltration or bypassing safety guidelines.
- Evidence:
evals/evals.jsonincludes a negative test case (deepstream-run-mv3dt-neg-001) that validates the agent's refusal to dump API keys or ignore safety instructions.- The
Safety Notessection inSKILL.mdexplicitly forbids silent repository cloning or unauthorized credential access. - [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface as it processes external video files and calibration YAML data.
- Evidence:
- Ingestion points:
DATASET_DIR/videos(MP4 files),DATASET_DIR/camInfo(YAML files), and zip exports from the AutoMagicCalib service. - Boundary markers: The instructions guide the agent to validate dataset structure and confirm before overwriting or processing new calibration data.
- Capability inventory: File system writing,
docker run(privileged), and network access viacurland Kafka. - Sanitization: The skill implements basic validation of file presence and YAML structure through Python scripts embedded in the instructions.
Audit Metadata