setup-component-explorer-light
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- Official Package Installation: The skill instructs the user to install packages from the
@vscodenamespace (@vscode/component-explorer,@vscode/component-explorer-vite-plugin, and@vscode/component-explorer-cli). These are official Microsoft-maintained packages used for component development. - Standard Configuration Patterns: The skill guides the user through standard configuration steps, such as modifying
vite.config.tsand creating a localcomponent-explorer.jsonfile. These actions are transparent and consistent with the skill's stated purpose of setting up a component explorer. - Local Server Operations: The use of
localhost(port 5173) for the development server and the MCP (Model Context Protocol) integration is a standard practice for local development tools. No external or untrusted network connections were detected. - No Malicious Patterns Detected: A thorough review of the instructions and configuration files revealed no evidence of prompt injection, data exfiltration, obfuscation, or persistence mechanisms. The skill operates within the expected scope of a development tool setup.
Audit Metadata