dlstreamer-coding-agent
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches and executes the
uvenvironment manager installer fromastral.sh(a well-known service). This tool is used to manage Python dependencies efficiently during the model export phase. - [EXTERNAL_DOWNLOADS]: Pulls the official DL Streamer Docker image from Intel's trusted repository (
intel/dlstreamer:latest). This environment is used for running and validating the generated vision AI pipelines. - [EXTERNAL_DOWNLOADS]: Downloads user-specified video files and AI models from well-known sources like Hugging Face and Pexels to facilitate application testing and model preparation.
- [COMMAND_EXECUTION]: Executes
docker runto launch vision AI applications, granting access to hardware accelerators via device flags (/dev/dri,/dev/accel). The skill includes instructions to run these processes as the current user and use specific network configurations for WebRTC functionality. - [DYNAMIC_EXECUTION]: Generates Python and C++ source code from predefined templates based on natural language requirements. The skill includes mandatory safety rules for the agent, such as using validated allowlists for shell arguments and avoiding direct interpolation of raw user input into commands.
- [INDIRECT_PROMPT_INJECTION]: As the skill processes natural language descriptions to generate executable code, it possesses a standard attack surface for indirect injection. The skill mitigates this risk by requiring explicit user confirmation for initial command execution and implementing input validation logic within its generated application templates.
Audit Metadata