Skip to main content

report

Generates timestamped video analysis reports by querying the VSS agent for detailed summaries of video content.

Install this skill

or
66/100

Security score

The report skill was audited on May 16, 2026 and we found 8 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 31

Template literal with variable interpolation in command context

SourceSKILL.md
31```bash
high line 59

Template literal with variable interpolation in command context

SourceSKILL.md
593. **Query the agent** — **`POST ${VSS_AGENT_BASE_URL}/generate`** with JSON **`{"input_message": "<prompt>"}`**. Ask for a **captioned summary with timestamps** (chronological segments, seconds from
medium line 68

Template literal with variable interpolation in command context

SourceSKILL.md
68```bash
medium line 32

Curl to non-GitHub URL

SourceSKILL.md
32curl -sf --max-time 5 "http://${HOST_IP}:8000/docs" >/dev/null
low line 69

Access to .env file

SourceSKILL.md
69# Set from deployment (compose / .env / host where vss-agent listens)
low line 32

External URL reference

SourceSKILL.md
32curl -sf --max-time 5 "http://${HOST_IP}:8000/docs" >/dev/null
low line 57

External URL reference

SourceSKILL.md
572. **VSS agent deployment** — Resolve the agent **HTTP base URL**. Read **`VSS_AGENT_PORT`**, **`EXTERNAL_IP` / `HOST_IP`**, or compose / deployment docs for the machine where the stack runs. Typical
low line 70

External URL reference

SourceSKILL.md
70export VSS_AGENT_BASE_URL="http://localhost:8000"
Scanned on May 16, 2026
View Security Dashboard
Installation guide →