vss-search-index

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses git clone within its bootstrap script to download the VSS application source code from the author's repository at github.com/open-edge-platform/edge-ai-libraries.git. This download is a sparse, shallow checkout intended to set up the environment required for the skill to operate.
  • [COMMAND_EXECUTION]: The skill executes several system commands including bash, curl, git, and jq. It runs a bundled setup script (scripts/vss-bootstrap.sh) that performs directory management, environment variable resolution, and repository cloning.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The agent ingests external data from the Pipeline Manager API, including video filenames, tags, and search result metadata (e.g., from GET /manager/videos and POST /manager/search/query).
  • Boundary markers: The skill contains a 'Final answer audit trail' section instructing the agent to report exact paths, parameters, and observed responses, which helps distinguish between instructions and data.
  • Capability inventory: The skill has capabilities to perform network requests via curl and process data using jq and bash.
  • Sanitization: External data is processed using jq, which ensures that ingested JSON content is parsed into structured fields rather than being treated as raw text.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 08:20 AM