vscode@1.0.2
CAUTION· static onlyPublisher claims: "Configures, debugs, and speeds up Visual Studio Code: settings scopes, launch.json, tasks.json, extensions, keybindings, formatters, and remote work. Use when a setting has no effect because something else overrides it, when format-on-save runs the wrong formatter or two formatters fight, when a breakpoint stays hollow, F5 does nothing, or a debug config will not attach, when a watch task hangs preLaunchTask forever, when the extension host crashes or two extensions collide, when IntelliSense dies and the TypeScript server or Python interpreter stops resolving, when a keyboard shortcut is swallowed by the terminal, when Remote-SSH, WSL, dev containers, or tunnels misbehave, when startup, search, or file watching is slow, or when deciding what belongs in .vscode/ and which extensions a fork like VSCodium or Cursor can install. Not for language semantics (`typescript`, `py`), Docker image authoring (`docker`), or general bug isolation (`debugging`)." Observed in sandbox: static analysis only — behavior not yet observed.
Coverage
Static only; nothing was run yet.The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-10 and scored it 65/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; References a credential file in the home directory. Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyThis version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
…`env:GITHUB_TOKEN`, `keychain:npm-publish`, `1password:Work/Registry/ci`, `file:~/.ssh/id_ed25519`. If data sits at an old location (`~/vscode/` or `~/clawic/vscode/`…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.…h reason it is shaped that way, with every secret replaced by its pointer — and add its `## Boxes` line in `memory.md` in the same turn (`memory-template.md`). Record the repo's debug entry point a…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.…`env:GITHUB_TOKEN`, `keychain:npm-publish`, `1password:Work/Registry/ci`, `file:~/.ssh/id_ed25519`. If data sits at an old location (`~/vscode/` or `~/clawic/vscode/`), m…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.…A needed by extension installs, the profile flags that produce a usable shell — write it as a line in `## Environment` of `~/Clawic/data/vscode/memory.md` in the same turn (`memory-template.md`). If the fix was a terminal profile blo…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.…ension verdict** — adopted, dropped, banned, pinned, or blamed for a conflict — write the row in `## Extensions` of `~/Clawic/data/vscode/memory.md` with the id, the verdict and the one-clause reason (`memory-template.md`). A b…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.…cific Version…** pins an extension after a bad release. The pin holds until you update manually — record why in the extension's `## Extensions` row in `memory.md`, or the pin becomes a mystery. - **Pre-release versions** are a separate cha…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.
What would make this Verified
15 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim ivangdavila: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
- Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
- References a credential file in the home directory≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.