agent-flow-visualization
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references downloads for the VS Code extension from the official Microsoft Visual Studio Marketplace (marketplace.visualstudio.com). This is a well-known, trusted service for extension distribution.
- [COMMAND_EXECUTION]: Instructions describe the use of
curlcommands to forward events from Claude Code hooks to a local HTTP server hosted by the extension. This is a standard architectural pattern for local tool integration and IPC (Inter-Process Communication) between a CLI and an IDE extension. - [COMMAND_EXECUTION]: The documentation provides standard development commands for building and testing the extension (
npm install,npm run build,npm run watch). These are standard practices for Open Source software development and do not involve suspicious remote execution. - [SAFE]: No obfuscation, prompt injection, persistence mechanisms, or unauthorized data exfiltration patterns were detected. The skill maintains a clear purpose-behavior alignment as a visualization utility.
Audit Metadata