deepstream-dev
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download software dependencies and pre-trained AI models from official NVIDIA and well-known providers like Confluent, including NVIDIA's NGC registry.
- [PROMPT_INJECTION]: The skill architecture is designed to ingest and process untrusted data from video sources and RTSP streams, representing an indirect prompt injection surface.
- Ingestion points:
nvurisrcbinandnvmultiurisrcbincomponents described inSKILL.mdandreferences/streaming_sources.md. - Boundary markers: None explicitly implemented in the provided code examples to separate control instructions from stream data.
- Capability inventory: The pipelines support network operations via
nvmsgbrokerandrequests, and file output viafilesinkas documented inreferences/kafka_messaging.mdandreferences/buffer_apis.md. - Sanitization: Provided code patterns do not include explicit validation or sanitization of input URIs or stream metadata.
- [COMMAND_EXECUTION]: Development and environment setup instructions include shell commands for repository configuration, key management, and package installation using
sudoprivileges.
Audit Metadata