vscode-sftp-config

Pass

Audited by Gen Agent Trust Hub on Mar 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions and checklists for executing system-level commands, including sudo, systemctl, chmod, and chown. These are necessary for configuring web server software and managing file permissions on a remote server.
  • [CREDENTIALS_UNSAFE]: The configuration templates reference sensitive local file paths such as ~/.ssh/config and ~/.ssh/id_rsa. This is appropriate for the skill's purpose of setting up SSH-based deployment, and the documentation correctly advises on securing these files and using key-based authentication over passwords.
  • [EXTERNAL_DOWNLOADS]: The documentation recommends installing the 'code-sftp' extension from the Visual Studio Marketplace and the 'certbot' utility from official system repositories. These are standard tools for the described workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 3, 2026, 12:16 PM