setup-component-explorer
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [VS Code Task Configuration]: The skill guides the addition of a background task to
.vscode/tasks.jsonthat executes the explorer's server. This is a common practice for local development tools and relies on binaries installed within the project's ownnode_modulesdirectory. - [MCP Server Integration]: It configures a Model Context Protocol (MCP) server in
.vscode/mcp.json. This provides a controlled interface for AI agents to interact with the component explorer, enabling features such as fixture discovery and visual testing within the local environment. - [Official Package Dependencies]: The setup instructions involve installing npm packages from the
@vscodescope. These are official components designed for integration with the development platform, following standard installation and configuration procedures. - [Indirect Prompt Injection Surface]: The integration allows an AI agent to process data from project fixture files (
.fixture.ts/tsx) through the MCP server's tools. While this introduces an ingestion point for project content into the agent's context, it is a functional requirement for the agent to assist with visual component testing and exploration.
Audit Metadata