add-policy
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Interaction with System Policy Stores: The skill details how configuration settings can be managed via operating system mechanisms.
- Evidence: The documentation refers to the Windows Registry (
Software\Policies\Microsoft), macOS managed preferences, and Linux configuration files (/etc/vscode/policy.json). - Context: These interactions are the core function of the skill, enabling administrative control over application settings at the OS level.
- Local Command Execution: The procedure includes running local scripts to validate changes and update policy artifacts.
- Evidence: Commands such as
npm run compile-check-ts-nativeand./scripts/code.sh --export-policy-dataare used during the development lifecycle. - Context: These are standard utility commands within the project repository used to ensure code integrity and regenerate auto-generated catalogs.
- External Package Reference: The skill mentions a specific package used for monitoring system policies.
- Evidence: The
@vscode/policy-watcherpackage is utilized by theNativePolicyService. - Context: This is a vendor-owned package from a trusted organization, providing the necessary functionality for policy detection.
- Policy Data Ingestion Surface: The skill includes logic that processes data from an account service to determine policy overrides.
- Evidence: Use of the
IPolicyDatainterface and avaluefunction to evaluate overrides fromIDefaultAccountService.policyData. - Context: This represents a standard architectural pattern for applying centralized enterprise policies through a user's account.
Audit Metadata