{
  "entry": {
    "kind": "extension",
    "slug": "blackbox-ai",
    "name": "Blackbox AI",
    "vendor": "Blackbox",
    "description": "Blackbox AI is an AI code-search and chat extension that markets itself as an all-in-one developer assistant — autocomplete, chat with the codebase, code-to-image search, and a browser companion. It is one of the higher-installed extensions in the AI category on the VS Code Marketplace, but it is also the entry in Anomity's catalog with the most opaque trust posture: the underlying model and the routing of user prompts are not publicly documented in detail, the vendor's privacy policy has shifted multiple times, and independent audits of what the extension transmits are not readily available.\n\nDeclared capabilities include reading files in the open workspace to construct prompts, making outbound network requests to Blackbox's hosted backend, and reading and writing credentials stored in the IDE for the user's Blackbox account. It does not declare filesystem write or shell execution.\n\nBlackbox AI is assigned the unknown trust level in the catalog — the highest trust adjustment — because the publisher's identity is not verifiable to the level of an official marketplace vendor and because the closed backend means the actual data flow cannot be confirmed from the outside. Combined with the credentials + outbound network signal, this is the kind of extension that should be evaluated carefully before installation on machines with access to proprietary code.",
    "website": "https://blackbox.ai",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "unknown",
    "capabilities": [
      "filesystem:read",
      "network:outbound",
      "credentials:access"
    ],
    "packaging": {
      "manager": "vsix",
      "packageName": "Blackboxapp.blackbox"
    },
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02T18:21:41.256Z",
    "risk": {
      "score": 80,
      "band": "critical",
      "signals": [
        {
          "id": "trust-unknown",
          "kind": "trust",
          "label": "Unknown publisher",
          "contribution": 20
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "1 high-risk capability: credentials:access",
          "contribution": 10
        }
      ],
      "dangerousCombos": []
    },
    "dangerousCombos": []
  }
}