vscode-extension-builder
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an instructional guide and template provider for VS Code extension development, containing only markdown documentation and standard configuration files.- [EXTERNAL_DOWNLOADS]: The skill references official Microsoft and industry-standard tools for extension development, such as the Yeoman generator (
yo,generator-code) and the VS Code extension manager (vsce).- [SAFE]: Webview templates included in the skill demonstrate security best practices by implementing Content Security Policy (CSP) headers and utilizing nonces for script authorization.- [SAFE]: The technical references explicitly address security concerns by providing guidance on input sanitization and secure secret storage using the VS Code Secrets API.
Audit Metadata