vscode-extension
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied requirements and project context to generate VS Code extensions. This creates a surface where malicious instructions embedded in a user's project files or requirements could influence the agent's output.
- Ingestion points: Processes user prompts and project context related to extension development in SKILL.md.
- Boundary markers: None explicitly defined within this skill's instructions.
- Capability inventory: The skill guides the agent to generate code, configurations, and implementation details for development tasks.
- Sanitization: No specific sanitization or validation of the input content is described in the skill body.
Audit Metadata