The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill requires the agent to generate Python code at runtime. Section § 6b-G describes a workflow where the agent must parse actions.json to deduce unordered groups and generate the nvds_action_detector/missing_number_detector.py file. This involves translating JSON-defined domain logic into executable Python code snippets and inserting them into a class template.
[INDIRECT_PROMPT_INJECTION]: The microservice architecture includes a Vision-Language Model (VLM) whose output is fed into a downstream SOP Checker logic component. This creates a surface where malformed or adversarial model outputs could influence the state of the compliance tracker.
Ingestion points: The vlm_output parameter in nvds_action_detector/sop_step_checker.py receives untrusted text from the Stage 3 VLM.
Boundary markers: Instructions in configs/vlm_prompts.txt act as soft constraints for the model output, but no cryptographically secure delimiters are used between the model's output and the downstream parser.
Capability inventory: The checker component uses regex and logic-based state machines. While it does not directly call shell commands using VLM data, the pipeline has broad permissions including network and file system access.
Sanitization: The parser uses regex (^\((\d+)\).+) to extract indices, which mitigates some direct injection but does not prevent logic-based attacks targeting the sequence validation state.
[COMMAND_EXECUTION]: The implementation in references/triton_model_reference.py executes system commands via subprocess.run(). Specifically, it launches a Python script (export_ddm_to_tensorrt.py) to build a TensorRT engine. The command arguments are derived from environment variables like DDM_MODEL_PATH and DDM_TRT_PRECISION.
[EXTERNAL_DOWNLOADS]: The Docker build process (references/Dockerfile_reference) retrieves code and binaries from various external sources:
Downloads the Basler Pylon SDK from a Microsoft Azure blob storage CDN (downloadbsl.blob.core.windows.net).
Clones the gst-plugin-pylon repository from Basler's official GitHub account.
Clones the DDM (Generic Event Boundary Detection) source code from a university research repository (github.com/MCG-NJU/DDM).

deepstream-sop