·
Last changedVersion:
This version passed the hardening gate. Hardening applied 1 targeted change and preserved all other text. Classified findings before hardening: 2. Classified findings closed: 0. Classified findings remaining: 2. Unclassified scanner findings remaining: 0. Review findings closed: 1. Review findings remaining: 14.
2
2
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/official-sample-contract.md | Prompt Injection | Direct prompt injection | Medium | Open | |
BENCHMARK.md | Sensitive Data & Secret Exposure | Agent snooping | Medium | Open |
2 findings
Build and run direct NVIDIA sample commands, then prove each consumer used the exact bytes produced by the preceding stage. This skill owns codec workflow and evidence policy; it does not own environment installation or product-support claims.
Apply these before inspecting the target, another skill, or a command:
For a PSNR/SSIM-only request, state that objective quality measurement is
outside this skill and requires a separately authorized workflow, return
not_evaluated with reason out_of_scope, then stop. Do not name a tool or
request media. Do the same for a request limited to capture, transport, AI,
display, or glass-to-glass latency. For a mixed codec-plus-quality request,
continue only the codec portion and report the quality portion as
not_evaluated with reason out_of_scope rather than silently omitting it.
Classify every other request before applying the media gate:
planned for architecture and route questions; they need no media.
State assumptions and what execution would verify, then stop before target
inspection, retrieval, authentication, recipe dispatch, or workspace
creation.jetson-video-recipe, report planned, and
do not inspect, authenticate, or launch anything.input_required, identify the intended route briefly using only stages
expressible by this skill's allowlisted samples, ask for that one item,
and stop before target inspection, retrieval, authentication, recipe
dispatch, or workspace creation. Label every other requested transform as
unresolved rather than inventing an executable route.Never choose catalog or synthetic media. The deterministic setup smoke fixture is allowed only for a bounded capability operation and is never representative pipeline or performance evidence.
Steps 3–4 apply to execution; step 5 also applies to recipe-bearing dry runs.
For other planning, preserve an explicit surface without claiming live
eligibility; delegated surface-specific dry runs return selection_required
without ranking the choices.
Preserve explicit native, pynvc, and both. Map “whichever”, “best
available”, “choose for me”, or otherwise delegated selection to auto, not
both. For auto: zero eligible surfaces is blocked, one runs, and two is
selection_required; do not rank them or consult old results.
Obtain a fresh read-only readiness result from jetson-video-setup through
public skill dispatch. For Python, pass any exact user-supplied
interpreter. Otherwise select the profile before
dispatch: decode-performance may use pynvc-smoke; encode, segmentation,
advanced/decode.py, pipeline, and encode-benchmark work require
full-samples. Setup checks that profile's conventional path; never scan
for a venv. If only the smoke profile is ready for full-samples work, return
dependency_required before workspace creation and direct the user to
provision a separate full-samples venv; never upgrade the smoke venv in
place. Native eligibility requires one
installed, package-verified SDK and one package-owned Samples root. Python
eligibility requires that exact interpreter, an importable PyNvVideoCodec
distribution loaded from its environment, and a clean pip check. The
result must match the requested Jetson and GPU. Preserve the setup reason
when a candidate is ineligible. The requested pipeline supplies its own
operation proof.
Recipe-bearing encode and transcode work requires jetson-video-recipe;
an acceptance request containing a performance stage also requires
jetson-video-benchmark. Invoke either through public skill dispatch and
pass its result as data. If a needed sibling is absent, preserve completed
stages and say: I can run <stage>, but it requires <skill>, which is not installed. Install <skill> and retry this stage.
“Preserve” means retain each completed stage's status and current
path/size/SHA-256 identities in the user-facing partial result; it does not
create hidden resumable state. On retry in the same request, reopen and
rehash those artifacts and skip only unchanged complete stages. With a
changed/missing identity, or a later request that does not supply the prior
evidence, use a new workspace and rerun the stage.
encode_decode, native_transcode,
pynvc_segments, container_triage, av1_verify, or acceptance.partial,
and apply the reference's single-retry rule.io_contract directly in every plan, result, and
producer/consumer boundary. Do not depend on a contract module or infer
external sharing from a device-memory mode.| Route | Required proof |
|---|---|
| One validated recipe; direct AppEncCuda→AppDec or wheel-owned basic encode→advanced decode; exact raw and decoded byte counts. |
| H.264 input, exact HEVC native projection, AppTrans output, exactly one accepted transcode marker, then AppDec over the same hash; require the AppTrans and AppDec frame counts to be equal and positive, and to equal the known input count when available. |
| Wheel-owned schedule/config; every declared segment is fresh and nonempty; decode and rehash every segment independently. |
| Eligible Jetson, exact local/retrieved container, intrinsic libavformat demux in AppDec or wheel-owned advanced decode, fresh decoded output. |
| Exact AV1 native recipe; host and video-memory modes; AppDec consumes each exact IVF output and reports the expected frame count. |
| A concise reproducible report covering requested readiness, capability, recipe, codec, and benchmark stages with per-stage status and identities. |
Use the statuses and concise report defined in pipeline-workflow.md. Include the selected runtime, exact media and recipe identities, literal commands, producer and consumer results, decoded layout/size validation, logs, limitations, and retry reason. Add compact JSON or a checksum manifest when useful or requested.
Get started with chainctlchainctl skill install public/nvidia/jetson-video-pipeline:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.chainreg.biz/public/github.com/nvidia/skills/jetson-video-pipeline:latest
Apache-2.0
BENCHMARK.md
HARDENING.md
SKILL.md
evals/evals.json
references/buffer-sharing-and-synchronization.md
references/in-process-codec-boundaries.md
references/official-sample-contract.md
references/pipeline-workflow.md
skill-card.md
skill.oms.sig