vscode-chat-response-stream
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation for the VS Code
ChatResponseStreamAPI, focusing on rich output types like markdown, buttons, and file trees within chat participants.- [SAFE]: It emphasizes security best practices, specifically warning against the use ofisTrusted = trueas a boolean onMarkdownStringobjects to prevent unauthorized command execution.- [SAFE]: The skill advises against rendering raw HTML in chat responses, which mitigates potential cross-site scripting (XSS) or UI injection risks within the VS Code environment.- [SAFE]: No patterns associated with data exfiltration, prompt injection, or malicious remote code execution were found in the provided implementation examples.
Audit Metadata