vss-summarize-video
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes a bootstrap script (
scripts/vss-bootstrap.sh) to prepare the environment. This script attempts to locate an existing Video Search and Summarization (VSS) application root locally. If not found, it performs a shallow, sparse clone of thesample-applications/video-search-and-summarizationdirectory from theopen-edge-platform/edge-ai-librariesrepository on GitHub. - [COMMAND_EXECUTION]: The skill executes local shell commands to facilitate its workflow. This includes running the provided
vss-bootstrap.shscript, changing directories to the application root, and usingcurlwithjqto interact with the VSS Pipeline Manager's REST API for operations such as health checks, video listing, and pipeline status polling. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes external data, including user-provided video files and JSON responses from the VSS backend API. The skill uses these responses to provide summaries and status updates to the user. However, the risk is minimal as the skill performs standard operational tasks and does not grant elevated privileges based on the ingested content.
Audit Metadata