vscode-openvsx-extension-publish
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several command-line interfaces including
npx,gh(GitHub CLI), andcode(VS Code) to automate the packaging, installation, and publishing of extensions, as well as managing GitHub repository issues. - [DYNAMIC_EXECUTION]: The workflow includes a step to generate a temporary JavaScript file (
_generate-icon.mjs) used to programmatically create an SVG icon based on the extension's purpose. This script is executed locally usingnodeduring the build process. - [EXTERNAL_DOWNLOADS]: The skill relies on
npxto dynamically download and execute official publishing tools, specifically@vscode/vscefrom Microsoft andovsxfrom the Eclipse Foundation, which are industry standards for VS Code extension distribution. - [INDIRECT_PROMPT_INJECTION]: The skill incorporates external metadata, such as extension names and publisher IDs sourced from the project's
package.json, into shell commands (e.g., during namespace creation or issue reporting). This constitutes an attack surface for command injection if the project metadata is maliciously crafted, representing a standard operational risk for developer-focused AI tools.
Audit Metadata