vscode-dev-workbench
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFE
Full Analysis
- [Local Development Commands]: The skill uses standard Node.js and shell commands to start local development servers and mock hosts. These operations are restricted to the local environment and the specified Microsoft repositories, aligning with expected developer workflows.
- [Browser Automation]: Includes snippets for Playwright and Chrome DevTools Protocol (CDP) to interact with the local workbench, manage service workers, and simulate mobile devices. These are standard techniques for automated web testing and do not pose a security risk in this context.
- [Network Operations]: Network communication is limited to the local loopback address (
127.0.0.1andlocalhost) for testing the local server and using WebSockets for mock agent connections. There are no indications of external data exfiltration or suspicious remote connections.
Audit Metadata