VAC Searchs for code injection into a game's process, memory hacking, or modification to core .exe and .dll files.
Thats all.
External Box ESP is not auto-searchable by VAC since it doesnt inject anything, however, if a VAC engineer wants to manually search ur PC, you will get caught