github Rust analyzed 8694f98 deep scan · partial (359/3,182 files)
unconfirmed MCP
vinhnx/VTCode
VT Code is an open-source Rust terminal coding agent.
C elevated
- capability exposure inferred + 22
- recent drift inferred + 20
- tool safety inferred + 12
- trust mitigators mixed − 3
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 1w ago · see ecosystem CVEs →
- C · 43 → C · 51
Inferred surface — each links to servers holding it:
No known CVEs for this server.
- high hidden prompt content
1 file(s) with hidden prompt content: vinhnx-VTCode-8694f98/src/agent/runloop/unified/auto_permission/prompts/system-prompt-auto-permission-review.md (hidden-directive): "name: 'S…
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 8694f98 · analyzer v33 · 1d ago
skills & prompt files 35
- hidden: prompt-file: hidden-directive vinhnx-VTCode-8694f98/src/agent/runloop/unified/auto_permission/prompts/system-prompt-auto-permission-review.md :1
name: 'System Prompt: Auto permission review' description: Guidance for classifier-backed tool review under agent permissions. ccVersion: 2.1.84
- agent-rules vinhnx-VTCode-8694f98/.github/copilot-instructions.md
- prompt-file vinhnx-VTCode-8694f98/.vtcode/prompts/generate-agent-file.md
- agent-rules vinhnx-VTCode-8694f98/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-a2a/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-acp/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-auth/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-bash-runner/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-config/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-core/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-eval/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-indexer/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-llm/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-mcp/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-memory/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-safety/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-skills/AGENTS.md
- skill vinhnx-VTCode-8694f98/crates/codegen/vtcode-skills/src/skills/assets/samples/ast-grep/SKILL.md
- skill vinhnx-VTCode-8694f98/crates/codegen/vtcode-skills/src/skills/assets/samples/cmd-analyze/SKILL.md
- skill vinhnx-VTCode-8694f98/crates/codegen/vtcode-skills/src/skills/assets/samples/cmd-command/SKILL.md
- skill vinhnx-VTCode-8694f98/crates/codegen/vtcode-skills/src/skills/assets/samples/cmd-review/SKILL.md
- skill vinhnx-VTCode-8694f98/crates/codegen/vtcode-skills/src/skills/assets/samples/skill-creator/SKILL.md
- skill vinhnx-VTCode-8694f98/crates/codegen/vtcode-skills/src/skills/assets/samples/skill-installer/SKILL.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-ui/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/vtcode-webmcp/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/codegen/xtask/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/common/vtcode-agent-plugins/AGENTS.md
- skill vinhnx-VTCode-8694f98/crates/common/vtcode-agent-plugins/tests/fixtures/agent-plugins-example/skills/migrate-agent-plugin/SKILL.md
- agent-rules vinhnx-VTCode-8694f98/crates/common/vtcode-commons/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/common/vtcode-diff/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/common/vtcode-exec-events/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/common/vtcode-macros/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/crates/common/vtcode-utility-tool-specs/AGENTS.md
- agent-rules vinhnx-VTCode-8694f98/src/AGENTS.md
- prompt-file vinhnx-VTCode-8694f98/src/agent/runloop/unified/auto_permission/prompts/agent-prompt-auto-permission-rule-reviewer.md
- recent drift +20 capability drift →
[](https://mcpobservatory.com/servers/github:vinhnx/VTCode/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of vinhnx.