NVIDIA AI Blueprint for Video Search and Summarization (VSS) is a reference architecture for applications that use AI to search, analyze, question, and summarize live or recorded video. It is intended for building video analytics agents with vision-language models, language models, retrieval-augmented generation, and NVIDIA NIM microservices. The catalogue entries provide coding-agent rules, skills, commands, agents, instructions, and settings associated with the project.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/NVIDIA-AI-Blueprints/video-search-and-summarizationWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/nvidia-ai-blueprints/video-search-and-summarization/vios-error-security)<a href="https://agentmods.dev/rules/nvidia-ai-blueprints/video-search-and-summarization/vios-error-security"><img src="https://agentmods.dev/badge/rules/nvidia-ai-blueprints/video-search-and-summarization/vios-error-security/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/rules/nvidia-ai-blueprints/video-search-and-summarization/vios-error-security"><img src="https://agentmods.dev/badge/rules/nvidia-ai-blueprints/video-search-and-summarization/vios-error-security.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00367 |
| Opus 5.5 | $0.00000 | $0.00147 |
| Sonnet 5.5 | $0.00000 | $0.00073 |
| Haiku 4.5 | $0.00000 | $0.00037 |
Grade A, and why
vios-error-security scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
SPDX-License-Identifier: Apache-2.0
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
Error Handling
- Log via
logger.husingLOG(error)/LOG(info)(or appropriateLOG(level)macros), notstd::cerrorprintf - Prefer return codes /
std::optional/ callbacks over exceptions in hot paths - Media pipeline errors must degrade gracefully (reconnect, skip frame)
Threading
- GStreamer pipeline callbacks run on GStreamer threads -- do not block them
- civetweb HTTP/WebSocket handlers must be non-blocking
- Protect shared state with
std::mutex/std::shared_mutex; document lock ordering
Security
- Validate all external inputs at REST API boundaries via
SchemaValidator - Never log credentials, tokens, or PII
- Do not bypass
UserAuthHandler - Run
/security-reviewbefore committing any change
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 40 lines · 0 tokens per session scan A 45993b1dd573
vios-error-security is a cursor rule published in the GitHub repository NVIDIA-AI-Blueprints/video-search-and-summarization (1,945 stars, last pushed today), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 367 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
move-copy-semantics
Avoid std::move(const&) silent copies; use sink-by-value + std::move.
llamaindex-js
Definitive guidelines for writing robust, performant, and maintainable llamaindex-js applications using modern TypeScript best practices.
monitor-c-conventions
C coding conventions for HPCPerfStats monitor (C-only).
monitor-c-refactor-standards
Behavior-preserving C refactor standards for HPCPerfStats monitor.
cpp-advanced-concurrency
A set of C++ guidance for running work at the same time safely. It covers mutexes, atomic operations, condition variables, and worker pools.
cpp
C++: modern patterns, memory safety, RAII.