vss-deploy-detection-tracking-2d
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill demonstrates high security maturity.
- Safe Credential Management: The skill includes logic to redact API keys and authorization headers from deployment logs and synthesized docker commands (
write_deployment_log.sh,synthesize_docker_run.sh). It also enforces strict file permissions (0600) on NGC configuration files. - Injection Prevention: User-supplied data such as RTSP URLs and stream IDs are safely encoded using Python's
json.dumpsbefore being sent to the REST API. Shell commands useshlex.quoteorprintf %qto prevent command injection. - Path Validation: The metrics collection script validates that output paths are within restricted directories (
/opt/storageor$HOME) and checks for path traversal attempts (..). - Trusted Sources: All external resource downloads (models, datasets) are performed using official tools (
ngcCLI) or from verified NVIDIA domains (api.ngc.nvidia.com).
Audit Metadata