blackbox-vscode
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the Blackbox AI VS Code extension and the associated Blackbox CLI. It also notes that the browser automation feature requires setting up Playwright. These components are standard for the tool's described functionality.
- [COMMAND_EXECUTION]: Documents the agent's ability to execute shell commands through the terminal and background tasks via the
/clifeature. It provides instructions on how to toggle auto-approval for these actions, allowing users to maintain control over command execution. - [DATA_EXFILTRATION]: Describes context integration capabilities where the agent can read local files, directories, and git commit history. While intended to provide context for coding tasks, this functionality grants the agent access to potentially sensitive information within the user's workspace.
- [PROMPT_INJECTION]: The skill highlights a surface for indirect prompt injection as the agent is designed to process external data, including web URLs and user-provided files, while possessing the ability to modify the filesystem and execute commands. The documentation specifically addresses this by describing the 'Manual' mode and 'Tools configuration' settings used to gate these operations.
Audit Metadata