code-tour
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to generate
.tourfiles, which are JSON-formatted documentation used by the CodeTour extension. This is a legitimate development workflow tool. - [EXTERNAL_DOWNLOADS]: The skill references the official Microsoft CodeTour JSON schema and the official project repository. These are well-known, trusted sources used for ensuring the generated files adhere to standard formats.
- [DATA_EXFILTRATION]: No evidence of unauthorized data access or external transmission was found. The skill operates on repository files solely to identify relevant code locations for tour anchors.
- [COMMAND_EXECUTION]: The instructions specifically restrict the skill from modifying source code and focus only on creating walkthrough artifacts within the
.tours/directory.
Audit Metadata