vscode-dev-workbench
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as
npm run devandnodeto run the development server and mock agent hosts from local checkouts. - [EXTERNAL_DOWNLOADS]: The skill references and relies on source code from official Microsoft GitHub repositories (
microsoft/vscodeandmicrosoft/vscode-dev) for the development environment. - [COMMAND_EXECUTION]: Uses browser automation tools to interact with the VS Code workbench, including executing JavaScript via
page.evaluateto manage service worker registrations and browser caches. - [SAFE]: Performs connectivity checks using
curlagainst local loopback addresses (127.0.0.1) to verify server availability, which is a standard development practice.
Audit Metadata