zed-extension-creator
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions and code templates for fetching binaries from well-known services like GitHub and the npm registry. These patterns use standard Zed API methods and include best practices such as versioned caching and installation status reporting.
- [REMOTE_CODE_EXECUTION]: The provided Rust templates facilitate the execution of downloaded language servers and MCP servers. This behavior is the intended primary purpose of the skill and occurs within the Zed WASM sandbox, which limits access to the host system as described in the reference documentation.
- [DATA_EXFILTRATION]: No patterns of sensitive data access or exfiltration were identified. The skill correctly emphasizes using the
WorktreeAPI for safe environment and filesystem access instead of standard library methods that would bypass the extension sandbox.
Audit Metadata