pixel-agents-vscode

SUSPICIOUS: the install sources and data flows are largely coherent for a VS Code visualization extension, but the documented option to spawn Claude Code with --dangerously-skip-permissions is disproportionate and weakens user approval safeguards. No clear credential theft, third-party exfiltration, or malicious installer behavior is shown.