vscode-extension-publisher
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development tools such as
git,npm, andvsce. These are used for repository synchronization, dependency management, and extension packaging/publishing. - [EXTERNAL_DOWNLOADS]: Installs
@vscode/vscefrom the official npm registry. This is a standard and expected dependency for the stated purpose. - [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The handling of Personal Access Tokens (PATs) follows secure practices by guiding the user to store them in environment variables or CI/CD secrets.
Audit Metadata