skills/microsoft/vscode/add-policy/Gen Agent Trust Hub

add-policy

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Interaction with System Policy Stores: The skill details how configuration settings can be managed via operating system mechanisms.
  • Evidence: The documentation refers to the Windows Registry (Software\Policies\Microsoft), macOS managed preferences, and Linux configuration files (/etc/vscode/policy.json).
  • Context: These interactions are the core function of the skill, enabling administrative control over application settings at the OS level.
  • Local Command Execution: The procedure includes running local scripts to validate changes and update policy artifacts.
  • Evidence: Commands such as npm run compile-check-ts-native and ./scripts/code.sh --export-policy-data are used during the development lifecycle.
  • Context: These are standard utility commands within the project repository used to ensure code integrity and regenerate auto-generated catalogs.
  • External Package Reference: The skill mentions a specific package used for monitoring system policies.
  • Evidence: The @vscode/policy-watcher package is utilized by the NativePolicyService.
  • Context: This is a vendor-owned package from a trusted organization, providing the necessary functionality for policy detection.
  • Policy Data Ingestion Surface: The skill includes logic that processes data from an account service to determine policy overrides.
  • Evidence: Use of the IPolicyData interface and a value function to evaluate overrides from IDefaultAccountService.policyData.
  • Context: This represents a standard architectural pattern for applying centralized enterprise policies through a user's account.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 06:22 PM