vscode-dev-workbench
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- Local Command Execution: The skill instructs the agent to run development commands like
npm run devand execute Node.js scripts (e.g.,agentHostServerMain.js) from local checkouts of thevscodeandvscode-devrepositories. These commands are used to start the web workbench server and a mock agent host for testing purposes. - Browser Automation and Dynamic Execution: The skill provides JavaScript snippets for use with browser automation tools (like Playwright) to interact with the VS Code web UI. This includes functions to clear service worker caches and simulate mobile device environments via the Chrome DevTools Protocol (CDP). These are standard techniques for automated testing of web applications.
- Local Network Operations: The instructions involve communicating with services running on the local loopback interface (
127.0.0.1andlocalhost). This is used for serving the development version of the workbench and connecting the client to a local mock backend, ensuring that development traffic remains local to the machine.
Audit Metadata