vss-summarize-video

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes a bootstrap script (scripts/vss-bootstrap.sh) to prepare the environment. This script attempts to locate an existing Video Search and Summarization (VSS) application root locally. If not found, it performs a shallow, sparse clone of the sample-applications/video-search-and-summarization directory from the open-edge-platform/edge-ai-libraries repository on GitHub.
  • [COMMAND_EXECUTION]: The skill executes local shell commands to facilitate its workflow. This includes running the provided vss-bootstrap.sh script, changing directories to the application root, and using curl with jq to interact with the VSS Pipeline Manager's REST API for operations such as health checks, video listing, and pipeline status polling.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes external data, including user-provided video files and JSON responses from the VSS backend API. The skill uses these responses to provide summaries and status updates to the user. However, the risk is minimal as the skill performs standard operational tasks and does not grant elevated privileges based on the ingested content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 08:20 AM