vscode-extension

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFE
Full Analysis
  • Development Workflow Integration: The skill provides instructions for building the extension and CLI using standard local scripts (build.sh, build.ps1). These operations are typical for repository contributors and facilitate the development of the VS Code extension.
  • Dependency Management: It instructs the use of corepack yarn for managing Node.js dependencies. This ensures that the project uses the versions pinned in the configuration, following best practices for environment consistency.
  • Automated Testing Practices: The guidance includes running unit and E2E tests using Mocha and Playwright. This promotes code quality and helps identify regressions during the development lifecycle.
  • Localization Workflow: The skill outlines a structured approach to localization using vscode.l10n.t and manifest-based keys, which is standard for VS Code extension development.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 02:41 PM
Security Audit — agent-trust-hub — vscode-extension