vss-search-index
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
git clonewithin its bootstrap script to download the VSS application source code from the author's repository atgithub.com/open-edge-platform/edge-ai-libraries.git. This download is a sparse, shallow checkout intended to set up the environment required for the skill to operate. - [COMMAND_EXECUTION]: The skill executes several system commands including
bash,curl,git, andjq. It runs a bundled setup script (scripts/vss-bootstrap.sh) that performs directory management, environment variable resolution, and repository cloning. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The agent ingests external data from the Pipeline Manager API, including video filenames, tags, and search result metadata (e.g., from
GET /manager/videosandPOST /manager/search/query). - Boundary markers: The skill contains a 'Final answer audit trail' section instructing the agent to report exact paths, parameters, and observed responses, which helps distinguish between instructions and data.
- Capability inventory: The skill has capabilities to perform network requests via
curland process data usingjqandbash. - Sanitization: External data is processed using
jq, which ensures that ingested JSON content is parsed into structured fields rather than being treated as raw text.
Audit Metadata