vrchat-osc
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation recommends installing
python-oscandhermes-agentvia standard package managers. These are legitimate libraries for OSC communication and the agent framework. - [COMMAND_EXECUTION]: Instructions include standard shell commands for package installation using
piporuvto set up the execution environment. - [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted user input which is relayed to the VRChat interface.
- Ingestion points: User-provided text strings in
vrchat_chatboxand values invrchat_avatar_param. - Boundary markers: No specific delimiters are used to wrap the text inputs in the documentation examples.
- Capability inventory: Network transmission of OSC messages via UDP to specified host/port.
- Sanitization: Character length enforcement (144 characters) for chatbox input reduces the surface for complex injection attempts.
Audit Metadata