skills/vcode-sh/vibe-tools/orpc-guide/Gen Agent Trust Hub

orpc-guide

Pass

Audited by Gen Agent Trust Hub on Feb 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The analyzed files consist entirely of documentation, usage guides, and code snippets for the oRPC framework. No hidden logic or malicious intent was found.
  • [EXTERNAL_DOWNLOADS]: The documentation references standard package installations from the official NPM registry (e.g., @orpc/server, @orpc/client, @orpc/openapi). It also provides links to legitimate third-party CDNs for API documentation tools like Swagger UI (unpkg.com) and Scalar (jsdelivr.net).
  • [COMMAND_EXECUTION]: The guide includes example terminal commands for installing dependencies (npm install) and cloning starter templates using npx degit middleapi/orpc/playgrounds/*. These commands are contextually appropriate for a framework guide and are intended for manual execution by developers.
  • [DATA_EXFILTRATION]: No evidence of unauthorized data transfer. The documentation promotes secure practices, specifically warning developers that ORPCError.data is public and should not contain sensitive secrets.
  • [CREDENTIALS_UNSAFE]: No hardcoded credentials or API keys are present. All examples use standard placeholders such as 'secret-key', 'my-api-key', or '***'.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 24, 2026, 04:28 PM