build-editor-extension

Fail

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: CRITICAL
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill contains references to official documentation and developer resources for VS Code, IntelliJ, Eclipse, Neovim, Sublime Text, and Zed. All URLs point to trusted domains and well-known services such as Microsoft, JetBrains, the OSGi Alliance, and Zed Industries.
  • [SAFE]: The Python and Bun scripts in the scripts/ directory perform static validation of configuration files like package.json, plugin.xml, and extension.toml. These scripts operate locally on the provided project directories and do not execute external code or transmit data over the network.
  • [SAFE]: Automated security alerts regarding docs.osgi.org and references/eclipse.md are evaluated as false positives. docs.osgi.org is the official repository for OSGi specifications, which is a core technology for Eclipse plugins and directly relevant to the skill's intended purpose.
Recommendations
  • CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
  • Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Nov 2, 2026, 09:03 PM