Skip to main content

vios

Interacts with VIOS REST APIs to manage sensors, recordings, and video clips efficiently.

Install this skill

or
0/100

Security score

The vios skill was audited on May 16, 2026 and we found 40 security issues across 3 threat categories, including 16 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 18

Template literal with variable interpolation in command context

SourceSKILL.md
18```bash
medium line 19

Curl to non-GitHub URL

SourceSKILL.md
19curl -sf --max-time 5 "http://${HOST_IP}:30888/vst/api/v1/sensor/list" >/dev/null
medium line 82

Curl to non-GitHub URL

SourceSKILL.md
82curl -sf --connect-timeout 5 http://<VST_ENDPOINT>/vst/api/v1/sensor/version
high line 128

Curl to non-GitHub URL

SourceSKILL.md
128curl -s "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<streamId>/url?startTime=<startTime>&endTime=<endTime>&container=mp4&disableAudio=true&expiryMinutes=<expiryMinutes>" | jq .
high line 152

Curl to non-GitHub URL

SourceSKILL.md
152curl -s "http://<VST_ENDPOINT>/vst/api/v1/live/stream/<streamId>/picture?width=<width>&height=<height>" \
high line 159

Curl to non-GitHub URL

SourceSKILL.md
159curl -s "http://<VST_ENDPOINT>/vst/api/v1/live/stream/<streamId>/picture/url" \
medium line 168

Curl to non-GitHub URL

SourceSKILL.md
168> curl -s "http://<VST_ENDPOINT>/vst/api/v1/storage/<streamId>/timelines" | jq .
high line 174

Curl to non-GitHub URL

SourceSKILL.md
174curl -s "http://<VST_ENDPOINT>/vst/api/v1/replay/stream/<streamId>/picture?startTime=<startTime>" \
high line 183

Curl to non-GitHub URL

SourceSKILL.md
183curl -s "http://<VST_ENDPOINT>/vst/api/v1/replay/stream/<streamId>/picture/url?startTime=<startTime>" \
high line 196

Curl to non-GitHub URL

SourceSKILL.md
196curl -s -X POST "http://<VST_ENDPOINT>/vst/api/v1/sensor/add" \
high line 213

Curl to non-GitHub URL

SourceSKILL.md
213curl -s -X POST "http://<VST_ENDPOINT>/vst/api/v1/sensor/add" \
high line 225

Curl to non-GitHub URL

SourceSKILL.md
225curl -s -X POST "http://<VST_ENDPOINT>/vst/api/v1/sensor/scan" | jq .
high line 235

Curl to non-GitHub URL

SourceSKILL.md
235curl -s -X DELETE "http://<VST_ENDPOINT>/vst/api/v1/sensor/<sensorId>" | jq .
high line 255

Curl to non-GitHub URL

SourceSKILL.md
255curl -s -X PUT "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<filename>?timestamp=<timestamp>&sensorId=<sensorId>" \
high line 275

Curl to non-GitHub URL

SourceSKILL.md
275curl -s -X PUT "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<filename>/<timestamp>" \
high line 299

Curl to non-GitHub URL

SourceSKILL.md
299curl -s -X DELETE "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<streamId>?startTime=<startTime>&endTime=<endTime>" | jq .
high line 320

Curl to non-GitHub URL

SourceSKILL.md
320curl -sf --connect-timeout 5 "http://<VST_ENDPOINT>/vst/api/v1/sensor/version"
high line 324

Curl to non-GitHub URL

SourceSKILL.md
324curl -s "http://<VST_ENDPOINT>/vst/api/v1/sensor/list" | jq .
high line 328

Curl to non-GitHub URL

SourceSKILL.md
328curl -s "http://<VST_ENDPOINT>/vst/api/v1/sensor/<sensorId>/streams" | jq .
high line 332

Curl to non-GitHub URL

SourceSKILL.md
332curl -s "http://<VST_ENDPOINT>/vst/api/v1/storage/<streamId>/timelines" | jq .
low line 19

External URL reference

SourceSKILL.md
19curl -sf --max-time 5 "http://${HOST_IP}:30888/vst/api/v1/sensor/list" >/dev/null
low line 72

External URL reference

SourceSKILL.md
72**Base URL:** `http://<VST_ENDPOINT>/vst/api/v1`
low line 82

External URL reference

SourceSKILL.md
82curl -sf --connect-timeout 5 http://<VST_ENDPOINT>/vst/api/v1/sensor/version
low line 128

External URL reference

SourceSKILL.md
128curl -s "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<streamId>/url?startTime=<startTime>&endTime=<endTime>&container=mp4&disableAudio=true&expiryMinutes=<expiryMinutes>" | jq .
low line 152

External URL reference

SourceSKILL.md
152curl -s "http://<VST_ENDPOINT>/vst/api/v1/live/stream/<streamId>/picture?width=<width>&height=<height>" \
low line 159

External URL reference

SourceSKILL.md
159curl -s "http://<VST_ENDPOINT>/vst/api/v1/live/stream/<streamId>/picture/url" \
low line 168

External URL reference

SourceSKILL.md
168> curl -s "http://<VST_ENDPOINT>/vst/api/v1/storage/<streamId>/timelines" | jq .
low line 174

External URL reference

SourceSKILL.md
174curl -s "http://<VST_ENDPOINT>/vst/api/v1/replay/stream/<streamId>/picture?startTime=<startTime>" \
low line 183

External URL reference

SourceSKILL.md
183curl -s "http://<VST_ENDPOINT>/vst/api/v1/replay/stream/<streamId>/picture/url?startTime=<startTime>" \
low line 196

External URL reference

SourceSKILL.md
196curl -s -X POST "http://<VST_ENDPOINT>/vst/api/v1/sensor/add" \
low line 213

External URL reference

SourceSKILL.md
213curl -s -X POST "http://<VST_ENDPOINT>/vst/api/v1/sensor/add" \
low line 225

External URL reference

SourceSKILL.md
225curl -s -X POST "http://<VST_ENDPOINT>/vst/api/v1/sensor/scan" | jq .
low line 235

External URL reference

SourceSKILL.md
235curl -s -X DELETE "http://<VST_ENDPOINT>/vst/api/v1/sensor/<sensorId>" | jq .
low line 255

External URL reference

SourceSKILL.md
255curl -s -X PUT "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<filename>?timestamp=<timestamp>&sensorId=<sensorId>" \
low line 275

External URL reference

SourceSKILL.md
275curl -s -X PUT "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<filename>/<timestamp>" \
low line 299

External URL reference

SourceSKILL.md
299curl -s -X DELETE "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<streamId>?startTime=<startTime>&endTime=<endTime>" | jq .
low line 320

External URL reference

SourceSKILL.md
320curl -sf --connect-timeout 5 "http://<VST_ENDPOINT>/vst/api/v1/sensor/version"
low line 324

External URL reference

SourceSKILL.md
324curl -s "http://<VST_ENDPOINT>/vst/api/v1/sensor/list" | jq .
low line 328

External URL reference

SourceSKILL.md
328curl -s "http://<VST_ENDPOINT>/vst/api/v1/sensor/<sensorId>/streams" | jq .
low line 332

External URL reference

SourceSKILL.md
332curl -s "http://<VST_ENDPOINT>/vst/api/v1/storage/<streamId>/timelines" | jq .
Scanned on May 16, 2026
View Security Dashboard
Installation guide →