vss-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the Video Search and Summarization (VSS) source code via
git clonefrom the vendor's official GitHub repository (open-edge-platform/edge-ai-libraries). This is an expected operation for an application deployment skill. - [COMMAND_EXECUTION]: The skill executes local shell scripts (
vss-bootstrap.sh,gen-secrets.sh,setup.sh) and usesdocker composeto manage the lifecycle of the VSS application. It includes safety checks, such as verifying the Docker daemon is reachable before execution. - [DYNAMIC_EXECUTION]: The skill dynamically sources configuration files (
vss.config,setup.sh) and runtime-generated credentials to populate the environment variables required for the Docker Compose services. - [SAFE]: Secret management follows security best practices. The
gen-secrets.shscript generates strong random credentials at runtime and stores them in a local file with restricted permissions (0600) located outside the application repository, preventing accidental exposure.
Audit Metadata