Valorant Vanguard actively monitors for programs that use specific Windows APIs (Application Programming Interfaces) common to screen scraping. Functions like PixelGetColor , GDIP , or DirectX hooks are massive red flags. Vanguard doesn't need to read what the script is doing; it just needs to see that AHK is repeatedly calling screen capture functions while Valorant is the active window.
When it detects a specific color—usually the bright yellow or purple enemy outlines —it sends an instant mouse-click command to the computer. ahk triggerbot valorant