vss-deploy

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the Video Search and Summarization (VSS) source code via git clone from the vendor's official GitHub repository (open-edge-platform/edge-ai-libraries). This is an expected operation for an application deployment skill.
  • [COMMAND_EXECUTION]: The skill executes local shell scripts (vss-bootstrap.sh, gen-secrets.sh, setup.sh) and uses docker compose to manage the lifecycle of the VSS application. It includes safety checks, such as verifying the Docker daemon is reachable before execution.
  • [DYNAMIC_EXECUTION]: The skill dynamically sources configuration files (vss.config, setup.sh) and runtime-generated credentials to populate the environment variables required for the Docker Compose services.
  • [SAFE]: Secret management follows security best practices. The gen-secrets.sh script generates strong random credentials at runtime and stores them in a local file with restricted permissions (0600) located outside the application repository, preventing accidental exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 08:20 AM