videodb
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
videodbPython SDK andpython-dotenvfrom official package registries to function. All external communication is directed to the well-known service domainvideodb.iofor media processing and AI analysis. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests untrusted media content from external URLs, RTSP streams, and YouTube.
- Ingestion points: External media is ingested via
coll.upload(url=...)andcoll.connect_rtstream(url=...)(found inapi-reference.md). - Boundary markers: The example prompts for indexing and text generation (found in
search.mdandgenerative.md) do not explicitly define boundary markers to separate user instructions from ingested content. - Capability inventory: The skill uses
Bash(python:*)for SDK interaction and writes state/logs to~/.local/state/videodb(found incapture-reference.md). - Sanitization: There is no explicit sanitization or filtering of transcribed text or visual descriptions before they are processed by the LLM.
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute Python code via the
Bashtool to interact with the VideoDB SDK. This usage is consistent with the skill's primary purpose and is restricted to the tools defined in the YAML frontmatter.
Audit Metadata