vvvv-node-libraries

Pass

Audited by Gen Agent Trust Hub on Mar 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were detected. The content consists of legitimate development guidelines and code snippets.
  • [EXTERNAL_DOWNLOADS]: The skill references well-known libraries and tools, including NuGet packages like VL.Core, MQTTnet, and NAudio, as well as the official vvvv/PublishVLNuget GitHub Action. These are documented neutrally as they originate from trusted or well-known development sources.
  • [PROMPT_INJECTION]: There are no attempts to manipulate the agent's behavior, bypass safety filters, or extract system prompts. All instructions are context-appropriate for vvvv development.
  • [DATA_EXFILTRATION]: No hardcoded credentials, sensitive file paths, or unauthorized network operations were identified. The mention of ${{ secrets.NUGET_KEY }} in the publishing guide is a standard security practice for CI/CD pipelines.
  • [REMOTE_CODE_EXECUTION]: No patterns involving the download and execution of arbitrary scripts from untrusted sources are present. All execution patterns (like node factories) are standard components of the vvvv plugin architecture.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 7, 2026, 02:27 AM