Vvvv Channels

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only coding reference for vvvv gamma channels; it documents app-state reads and writes, but the behavior is disclosed and aligned with the skill’s purpose.

This skill appears safe as a coding-reference skill. Before using generated code, pay particular attention to any channel writes, especially root-level writes or scene load code, because those can persist or update many values in the vvvv project.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

Generated code may read or change public vvvv channel values if the user asks for channel integration.

Why it was flagged

The skill teaches use of an app-wide channel API that can mutate named runtime state. This is expected for a vvvv channel integration guide, but users should ensure writes are intentional and scoped.

Skill content
Any code (patches, C# nodes, external bindings) can read and write channels by their string path.
Recommendation

Review generated channel paths and write conditions, especially for code that changes values rather than only reading them.

#
ASI08: Cascading Failures
Low
What this means

A mistaken root-channel update could change many vvvv settings or scene values at once.

Why it was flagged

Root-channel writes can affect a whole hierarchy of application state. The behavior is clearly documented and relevant to scene load workflows, but mistakes could have broad project effects.

Skill content
Writing to the root "Project" channel propagates to every sub-channel in the hierarchy — no need to iterate individual channels.
Recommendation

Use explicit user controls, validation, and backups for generated code that writes to root or high-level channels.