vscode-extension-guide-en
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as an educational resource and documentation hub for VS Code extension development. It proactively promotes security best practices, such as implementing Content Security Policy (CSP) and nonces in Webview components to prevent cross-site scripting (XSS).\n- [EXTERNAL_DOWNLOADS]: The documentation references official VS Code utility packages and standard development dependencies (e.g., @vscode/vsce, yo, generator-code) from the trusted NPM registry.\n- [COMMAND_EXECUTION]: Provides instructions for running standard development tools (npm, npx, tsc) to manage the extension lifecycle, including building, testing, and packaging.\n- [SAFE]: Includes explicit guidance on the secure management of Personal Access Tokens (PATs) for Marketplace publishing, warning against accidental exposure and providing instructions for safe local environment variable configuration.
Audit Metadata