develop-zed-editor-extensions
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external resources required for Zed extension development. Assets such as the Makefile grammar are fetched from the well-known
tree-sitter-grammarsorganization on GitHub, and official JSON schemas are downloaded fromzed.dev. The example extensions demonstrate standard patterns for downloading language server binaries from developer repositories (e.g.,artempyanykh/marksman) and installing npm packages from the@modelcontextprotocolorganization. - [COMMAND_EXECUTION]: The development workflow involves executing local commands to build and verify extensions. The
assets/examples/verify.shscript runscargo build,cargo test, andcargo clippyto ensure Rust crates are correctly compiled. Additionally, the skill utilizes bundled Python tools to validate extension metadata, syntax queries, and themes against established rules. - [INDIRECT_PROMPT_INJECTION]: The skill processes extension source files provided by developers, presenting a surface for potential indirect prompt injection.
- Ingestion points: The agent reads
extension.toml, Rust source files, and Tree-sitter query files (.scm) from the extension directory. - Boundary markers: No explicit delimiters or warnings are used when processing these files.
- Capability inventory: Subprocess execution for building (Cargo) and static analysis (Python-based checkers).
- Sanitization: The bundled scripts (
check_extension.py, etc.) perform validation of the input file structures and values against expected schemas and allowed keys.
Audit Metadata