vss-deploy-dense-captioning

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The deploy flow conditionally runs wget at runtime to fetch and then use the remote Docker Compose file (which controls containers/code execution) from https://raw.githubusercontent.com/NVIDIA-AI-Blueprints/video-search-and-summarization/${VSS_REF}/deploy/docker/services/rtvi/rtvi-vlm/rtvi-vlm-docker-compose.yml, making this a required runtime dependency that can cause remote-executed content to run locally.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs elevated host operations (use of sudo -n for ownership fixes and docker, and applying a /etc/docker/daemon.json fix), which involve modifying system configuration and other privileged state on the host.