vrp-framework
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration were detected in the skill's instructions or scripts.
- [EXTERNAL_DOWNLOADS]: The documentation references external GitHub repositories for framework dependencies and technical mirrors (e.g.,
fivem-natives,cacheaside,cerberus). These are resources provided by the author to support the framework's ecosystem. - [COMMAND_EXECUTION]: The documentation includes standard shell commands, such as
git clone, intended for manual execution by developers to set up the necessary environment. - [PROMPT_INJECTION]: The skill provides robust guidelines for handling player inputs from events and NUI callbacks, explicitly recommending the use of sanitization utilities and server-side validation to prevent exploits.
- Ingestion points: Untrusted data enters the resource context via server events (
AddEventHandler) and NUI callbacks (RegisterNUICallback). - Boundary markers: Uses a
Passportidentification system for server-side character validation. - Capability inventory: Includes database interactions via
oxmysql, server data persistence, and network logging through webhooks. - Sanitization: Includes specific instructions to use
parseIntandsanitizeStringfor all player-controlled inputs.
Audit Metadata