vdms-dataprep-user

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads deployment artifacts (setup.sh, compose.yaml) from the author's official GitHub repository (https://raw.githubusercontent.com/open-edge-platform/edge-ai-libraries/main/...). This is part of the intended installation process for the microservice stack.
  • [REMOTE_CODE_EXECUTION]: The skill fetches a setup script from a remote URL and executes it locally using the source command. Since the source is the vendor's own repository and the operation is necessary for environment configuration, this is considered normal functionality for this skill.
  • [COMMAND_EXECUTION]: Automated scans flagged a pattern where local health check data from curl is piped to python3. However, the command uses python3 -c to execute a static JSON parsing script on the input data, which is a safe and standard practice for shell-based health checks.
  • [COMMAND_EXECUTION]: The skill instructs the user to execute several local commands including bash, source, docker compose, and curl to manage the local service stack. All operations target localhost and are scoped to the intended purpose of video ingestion management.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 04:38 PM
Security Audit — agent-trust-hub — vdms-dataprep-user