vdms-dataprep-user
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads deployment artifacts (
setup.sh,compose.yaml) from the author's official GitHub repository (https://raw.githubusercontent.com/open-edge-platform/edge-ai-libraries/main/...). This is part of the intended installation process for the microservice stack. - [REMOTE_CODE_EXECUTION]: The skill fetches a setup script from a remote URL and executes it locally using the
sourcecommand. Since the source is the vendor's own repository and the operation is necessary for environment configuration, this is considered normal functionality for this skill. - [COMMAND_EXECUTION]: Automated scans flagged a pattern where local health check data from
curlis piped topython3. However, the command usespython3 -cto execute a static JSON parsing script on the input data, which is a safe and standard practice for shell-based health checks. - [COMMAND_EXECUTION]: The skill instructs the user to execute several local commands including
bash,source,docker compose, andcurlto manage the local service stack. All operations targetlocalhostand are scoped to the intended purpose of video ingestion management.
Audit Metadata