install-vscode-extension
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The skill utilizes the
copilot_runVscodeCommandtool to execute the internal VS Code commandworkbench.extensions.installExtension. This is a standard method for programmatic IDE management. - [Extension Installation]: This skill enables the installation of extensions from the VS Code Marketplace. While this involves adding new capabilities to the environment, it is the intended primary purpose of the skill and uses the official VS Code mechanism.
- [Input Processing]: The skill accepts an
extensionIdprovided in the conversation context to determine which extension to install. This ingestion point is necessary for the skill's utility in helping users find and add new tools to their workspace.
Audit Metadata