metro-ai-apps-recipe

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The install.sh script downloads OpenVINO models and sample video files from the vendor's official GitHub organization (open-edge-platform) and standard model repositories.
  • [COMMAND_EXECUTION]: The skill generates several shell scripts (install.sh, validate_env.sh, sample_watchdog.sh) designed to automate environment setup, container orchestration, and self-signed certificate generation using openssl.
  • [COMMAND_EXECUTION]: The testing documentation (references/TESTS.md) includes instructions for running automated tests within a Docker container that mounts the host's Docker socket (/var/run/docker.sock) to allow for stack lifecycle verification.
  • [EXTERNAL_DOWNLOADS]: The Node-RED configuration includes a script (install_package.sh) that installs well-known plugins (node-red-dashboard, node-red-contrib-aggregator) from the NPM registry during container initialization.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 12:07 AM
Security Audit — agent-trust-hub — metro-ai-apps-recipe