deepstream-import-vision-model tests

Unit / validation tests for the hardened scripts in this skill. These run locally with only python3 (stdlib + bash) — no GPU, no network, no external package install required.

What is covered

Test class	Script	What it verifies
`TestInstallScript`	`install.sh`	`--target` rejects `/`, `..`, empty, missing; dry-run previews the self-contained skill copy without writing to target
`TestCleanupScript`	`scripts/model/cleanup.sh`	`MODEL_NAME` regex enforcement; shell meta-chars / slashes rejected; dry-run does not touch real files
`TestHFScripts`	`scripts/model/hf-list-files.sh`, `hf-download-config.sh`	`HF_ORG` / `MODEL_NAME` / `DEST` validation
`TestNGCScripts`	`scripts/model/ngc-list-files.sh`, `ngc-download.sh`	NGC arg validation; `DEST_DIR` refuses `""`, `/`, path-traversal
`TestKittiDumpUsage`	`scripts/deepstream/ds-kitti-dump.sh`	Usage message printed when required args missing
`TestEmbedImages`	`scripts/report/md-to-html-pdf.py`	Local images inlined as `data:` URIs; remote / absolute / traversal paths left alone (proves `--enable-local-file-access` is safe to drop)
`TestPowerShellInstaller`	`install.ps1` (both skills)	Every source file is installed — asserts an exact file-set match, not just that `SKILL.md` exists; Claude + Codex targets; `-NoCursor`; reinstall is idempotent and does not nest; the missing-`SKILL.md` guard throws

Note on `TestPowerShellInstaller`

This one exists because of a shipped bug: install.ps1 used Copy-Item -LiteralPath $SkillDir -Destination $dest -Recurse, whose behaviour depends on whether the destination already exists, and which on Windows PowerShell 5.1 created the directory tree without copying any files — an empty skill dir, no SKILL.md, and a skill the agent runtime silently refused to load. Nothing caught it because the suites only ever exercised install.sh.

It needs a PowerShell, discovered in this order: pwsh, powershell, then the mcr.microsoft.com/powershell docker image if already pulled. With none available it skips — it will never fail on a machine without PowerShell. To enable it on a Linux dev box:

docker pull mcr.microsoft.com/powershell:latest

Caveat: the dev-box/container runner is PowerShell 7. The original bug was 5.1-specific, so this pins the copy contract rather than reproducing every 5.1 quirk — run it on Windows for full fidelity.

Run

From the skill root:

python3 -m unittest discover -s tests -v

Or a single class:

python3 -m unittest tests.test_hardened_scripts.TestInstallScript -v

Adding tests

Tests shell out to the real scripts and assert on exit codes + stderr/stdout, or import Python helpers directly. Keep them hermetic: use tempfile.TemporaryDirectory(), don't rely on network access, and don't shell out to tools that may not be installed on every dev machine (e.g. trtexec, deepstream-app, wkhtmltopdf, mmdc, ngc).

Third-party checks

No alerts27d3 checks · Risk SAFE

Gen Agent Trust Hub27d
This skill provides an automated pipeline for importing HuggingFace or NVIDIA NGC vision models into NVIDIA DeepStream. It follows industry best practices for model acquisition, TensorRT engine building, and benchmarking. All external downloads target trusted sources (HuggingFace and NVIDIA NGC) or well-known package registries, and all code traces back to the vendor (NVIDIA). No malicious patterns or data exfiltration risks were detected.
Socket27d
No alerts
Snyk27d
Risk: LOW · No issues

Capability

Other metadata

metadata: { "author": "Tushar Khinvasara <tkhinvasara@nvidia.com>", "owner": "Tushar Khinvasara <tkhinvasara@nvidia.com>", "service": "deepstream", "version": "1.5.2", "reviewed": "2026-08-04", "team": "deepstream-sdk", "tags": [ "deepstream", "tensorrt", "object-detection", "import-vision-model" ], "languages": [ "bash", "python", "cpp" ], "domain": "computer-vision" }

/deepstream-import-vision-model

testsREADME.md