xvcl
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed instructions and examples for writing and transpiling Fastly VCL using XVCL. All directives and patterns described are consistent with legitimate VCL development workflows.
- [SAFE]: The use of external tools like the
xvcltranspiler (viauvx) and the Falco linting/simulation tool (https://github.com/ysugimoto/falco) is appropriate for the stated purpose of the skill. These are recognized tools in the VCL ecosystem. - [SAFE]: Cryptography examples in
references/crypto.mdpromote secure practices, such as using constant-time comparisons (digest.secure_is_equal) and modern hashing algorithms (SHA-256) for API key and JWT validation. - [SAFE]: No malicious patterns, such as prompt injection, credential exfiltration, or unauthorized persistence, were found in the skill metadata or instructional content.
Audit Metadata