vios
Interacts with VIOS REST APIs to manage sensors, recordings, and video clips efficiently.
Install this skill
Security score
The vios skill was audited on May 16, 2026 and we found 40 security issues across 3 threat categories, including 16 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 18 | ```bash |
Curl to non-GitHub URL
| 19 | curl -sf --max-time 5 "http://${HOST_IP}:30888/vst/api/v1/sensor/list" >/dev/null |
Curl to non-GitHub URL
| 82 | curl -sf --connect-timeout 5 http://<VST_ENDPOINT>/vst/api/v1/sensor/version |
Curl to non-GitHub URL
| 128 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<streamId>/url?startTime=<startTime>&endTime=<endTime>&container=mp4&disableAudio=true&expiryMinutes=<expiryMinutes>" | jq . |
Curl to non-GitHub URL
| 152 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/live/stream/<streamId>/picture?width=<width>&height=<height>" \ |
Curl to non-GitHub URL
| 159 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/live/stream/<streamId>/picture/url" \ |
Curl to non-GitHub URL
| 168 | > curl -s "http://<VST_ENDPOINT>/vst/api/v1/storage/<streamId>/timelines" | jq . |
Curl to non-GitHub URL
| 174 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/replay/stream/<streamId>/picture?startTime=<startTime>" \ |
Curl to non-GitHub URL
| 183 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/replay/stream/<streamId>/picture/url?startTime=<startTime>" \ |
Curl to non-GitHub URL
| 196 | curl -s -X POST "http://<VST_ENDPOINT>/vst/api/v1/sensor/add" \ |
Curl to non-GitHub URL
| 213 | curl -s -X POST "http://<VST_ENDPOINT>/vst/api/v1/sensor/add" \ |
Curl to non-GitHub URL
| 225 | curl -s -X POST "http://<VST_ENDPOINT>/vst/api/v1/sensor/scan" | jq . |
Curl to non-GitHub URL
| 235 | curl -s -X DELETE "http://<VST_ENDPOINT>/vst/api/v1/sensor/<sensorId>" | jq . |
Curl to non-GitHub URL
| 255 | curl -s -X PUT "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<filename>?timestamp=<timestamp>&sensorId=<sensorId>" \ |
Curl to non-GitHub URL
| 275 | curl -s -X PUT "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<filename>/<timestamp>" \ |
Curl to non-GitHub URL
| 299 | curl -s -X DELETE "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<streamId>?startTime=<startTime>&endTime=<endTime>" | jq . |
Curl to non-GitHub URL
| 320 | curl -sf --connect-timeout 5 "http://<VST_ENDPOINT>/vst/api/v1/sensor/version" |
Curl to non-GitHub URL
| 324 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/sensor/list" | jq . |
Curl to non-GitHub URL
| 328 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/sensor/<sensorId>/streams" | jq . |
Curl to non-GitHub URL
| 332 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/storage/<streamId>/timelines" | jq . |
External URL reference
| 19 | curl -sf --max-time 5 "http://${HOST_IP}:30888/vst/api/v1/sensor/list" >/dev/null |
External URL reference
| 72 | **Base URL:** `http://<VST_ENDPOINT>/vst/api/v1` |
External URL reference
| 82 | curl -sf --connect-timeout 5 http://<VST_ENDPOINT>/vst/api/v1/sensor/version |
External URL reference
| 128 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<streamId>/url?startTime=<startTime>&endTime=<endTime>&container=mp4&disableAudio=true&expiryMinutes=<expiryMinutes>" | jq . |
External URL reference
| 152 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/live/stream/<streamId>/picture?width=<width>&height=<height>" \ |
External URL reference
| 159 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/live/stream/<streamId>/picture/url" \ |
External URL reference
| 168 | > curl -s "http://<VST_ENDPOINT>/vst/api/v1/storage/<streamId>/timelines" | jq . |
External URL reference
| 174 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/replay/stream/<streamId>/picture?startTime=<startTime>" \ |
External URL reference
| 183 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/replay/stream/<streamId>/picture/url?startTime=<startTime>" \ |
External URL reference
| 196 | curl -s -X POST "http://<VST_ENDPOINT>/vst/api/v1/sensor/add" \ |
External URL reference
| 213 | curl -s -X POST "http://<VST_ENDPOINT>/vst/api/v1/sensor/add" \ |
External URL reference
| 225 | curl -s -X POST "http://<VST_ENDPOINT>/vst/api/v1/sensor/scan" | jq . |
External URL reference
| 235 | curl -s -X DELETE "http://<VST_ENDPOINT>/vst/api/v1/sensor/<sensorId>" | jq . |
External URL reference
| 255 | curl -s -X PUT "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<filename>?timestamp=<timestamp>&sensorId=<sensorId>" \ |
External URL reference
| 275 | curl -s -X PUT "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<filename>/<timestamp>" \ |
External URL reference
| 299 | curl -s -X DELETE "http://<VST_ENDPOINT>/vst/api/v1/storage/file/<streamId>?startTime=<startTime>&endTime=<endTime>" | jq . |
External URL reference
| 320 | curl -sf --connect-timeout 5 "http://<VST_ENDPOINT>/vst/api/v1/sensor/version" |
External URL reference
| 324 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/sensor/list" | jq . |
External URL reference
| 328 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/sensor/<sensorId>/streams" | jq . |
External URL reference
| 332 | curl -s "http://<VST_ENDPOINT>/vst/api/v1/storage/<streamId>/timelines" | jq . |