# VS Code

> VS Code is an officially published AI tool from Microsoft. Anomity scores its risk at 10 out of 100 (low).

- **Canonical URL:** https://catalog.anomity.ai/agent/vscode
- **Kind:** AI tool
- **Publisher:** Microsoft
- **Trust level:** official
- **Risk score:** 10/100 (low)
- **Website:** https://code.visualstudio.com
- **Last updated:** 2026-09-02
- **JSON:** https://catalog.anomity.ai/api/entries/agent/vscode

## Description

Code editor with GitHub Copilot, MCP servers, and AI extensions

## Why it scored 10

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |

Clamped result: **10/100**, band **low**.

## Configuration surface

Files this tool reads on the host. Anything written here changes what the agent does next.

- `vscode-user-settings` — User settings
    - win32: `${APPDATA}\Code\User\settings.json`
    - darwin: `${HOME}/Library/Application Support/Code/User/settings.json`
    - linux: `${HOME}/.config/Code/User/settings.json`
- `vscode-user-mcp` — User-level MCP servers
    - win32: `${APPDATA}\Code\User\mcp.json`
    - darwin: `${HOME}/Library/Application Support/Code/User/mcp.json`
    - linux: `${HOME}/.config/Code/User/mcp.json`
- `vscode-project-mcp` — Project-level MCP servers
    - win32: `${PROJECT}\.vscode\mcp.json`
    - darwin: `${PROJECT}/.vscode/mcp.json`
    - linux: `${PROJECT}/.vscode/mcp.json`
- `vscode-project-settings` — Project workspace settings
    - win32: `${PROJECT}\.vscode\settings.json`
    - darwin: `${PROJECT}/.vscode/settings.json`
    - linux: `${PROJECT}/.vscode/settings.json`
- `vscode-copilot-instructions` — GitHub Copilot custom instructions
    - win32: `${PROJECT}\.github\copilot-instructions.md`
    - darwin: `${PROJECT}/.github/copilot-instructions.md`
    - linux: `${PROJECT}/.github/copilot-instructions.md`
- `vscode-extension-manifest` — Installed VS Code extension manifests
- `vscode-copilot-instructions-glob` — GitHub Copilot per-file/per-language instructions (.github/instructions/**/*.instructions.md)
- `vscode-copilot-chatmodes` — GitHub Copilot custom chat modes (.github/chatmodes/*.chatmode.md)
- `vscode-copilot-prompts` — GitHub Copilot saved prompt files (.github/prompts/*.prompt.md)
- `vscode-project-tasks` — Workspace tasks (auto-run shell commands + env vars)
    - win32: `${PROJECT}\.vscode\tasks.json`
    - darwin: `${PROJECT}/.vscode/tasks.json`
    - linux: `${PROJECT}/.vscode/tasks.json`
- `vscode-project-launch` — Workspace debugger launch configurations (env vars)
    - win32: `${PROJECT}\.vscode\launch.json`
    - darwin: `${PROJECT}/.vscode/launch.json`
    - linux: `${PROJECT}/.vscode/launch.json`
- `vscode-profile-settings` — Per-profile user settings (multi-profile installs)
- `vscode-profile-mcp` — Per-profile MCP servers (multi-profile installs)
- `vscode-project-agents-md` — Repository-level AGENTS.md (cross-tool agent rules read by Copilot)
    - win32: `${PROJECT}\AGENTS.md`
    - darwin: `${PROJECT}/AGENTS.md`
    - linux: `${PROJECT}/AGENTS.md`

## Related AI tools

- [AdaL](https://catalog.anomity.ai/agent/adal) — risk 10 (low)
- [Agent Zero](https://catalog.anomity.ai/agent/agent-zero) — risk 10 (low)
- [Aide](https://catalog.anomity.ai/agent/aide) — risk 10 (low)
- [Aider](https://catalog.anomity.ai/agent/aider) — risk 10 (low)
- [AiderDesk](https://catalog.anomity.ai/agent/aider-desk) — risk 10 (low)
- [Amazon Q Developer](https://catalog.anomity.ai/agent/amazon-q) — risk 10 (low)

---

Source: Anomity Catalog (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json
