build-editor-extension
Fail
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: CRITICAL
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill contains references to official documentation and developer resources for VS Code, IntelliJ, Eclipse, Neovim, Sublime Text, and Zed. All URLs point to trusted domains and well-known services such as Microsoft, JetBrains, the OSGi Alliance, and Zed Industries.
- [SAFE]: The Python and Bun scripts in the
scripts/directory perform static validation of configuration files likepackage.json,plugin.xml, andextension.toml. These scripts operate locally on the provided project directories and do not execute external code or transmit data over the network. - [SAFE]: Automated security alerts regarding
docs.osgi.organdreferences/eclipse.mdare evaluated as false positives.docs.osgi.orgis the official repository for OSGi specifications, which is a core technology for Eclipse plugins and directly relevant to the skill's intended purpose.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata