zed-editor

SUSPICIOUS. The skill’s overall purpose and most capabilities are coherent for Zed extension development, and most install sources are official. However, it normalizes broad execution/download permissions, shows placeholder third-party binary download-and-run patterns with weak verification, and includes an MCP example that forwards the full environment to child processes; these are disproportionate enough to warrant caution but do not show confirmed malicious intent.