tao-generate-video-reasoning-annotations
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
auto_labelcommand-line tool within a TAO Toolkit container to orchestrate the video annotation pipeline, as defined inreferences/skill_info.yaml. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface due to its multi-step architecture where the output of one model (e.g., video captions) is used as input for subsequent model prompts (e.g., QA generation).
- Ingestion points: Video files are processed by VLMs in Step 1, and the resulting JSONL caption files are ingested as text in Steps 2 and 3.
- Boundary markers: The skill uses structured prompts with clear delimiters such as
<example>,[Global Caption], and{step_2_output}to separate instructions from data. - Capability inventory: The pipeline has the capability to execute local shell commands (
auto_label), perform file I/O within the results directory, and initiate network requests to configured VLM/LLM API endpoints. - Sanitization: There is no evidence of explicit sanitization or filtering of model-generated text before it is interpolated into downstream prompts, which is typical for distillation pipelines.
- [EXTERNAL_DOWNLOADS]: The skill facilitates communication with external VLM and LLM services, including Google Gemini and OpenAI-compatible endpoints, to process video and text data. These connections are standard for the tool's primary purpose and target well-known or user-specified services.
- [SAFE]: The documentation mentions system-level requirements such as
ffmpegandnvidia-container-toolkit, which are standard dependencies for video processing and GPU acceleration in this domain.
Audit Metadata