{
  "entry": {
    "kind": "extension",
    "slug": "claude-code-for-vscode",
    "name": "Claude Code for VS Code",
    "vendor": "Anthropic",
    "description": "Anthropic's extension that runs Claude Code inside VS Code — the same agent as the CLI, surfaced in the editor with inline diffs, a sidebar session, and the editor's own file context feeding the agent.\n\nThe capability surface is that of a full coding agent rather than a completion tool: it reads and writes files across the workspace, runs shell commands through its Bash tool, reaches the network for model calls, and holds an API credential. That combination matches Anomity's full-control pattern, which is the honest description of any agent that can edit and execute. Anthropic-published, so it takes the official trust adjustment; the operational controls that matter are its permission prompts and allow-lists, which should not be blanket-approved on repositories that hold production credentials.",
    "website": "https://docs.claude.com/en/docs/claude-code/ide-integrations",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "filesystem:read",
      "filesystem:write",
      "shell:execute",
      "network:outbound",
      "credentials:access"
    ],
    "packaging": {
      "manager": "vsix",
      "packageName": "anthropic.claude-code"
    },
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 100,
      "band": "critical",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "3 high-risk capabilities: filesystem:write, shell:execute, credentials:access",
          "contribution": 30
        },
        {
          "id": "exfiltration-risk",
          "kind": "combination",
          "label": "Data exfiltration risk (high)",
          "description": "Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.",
          "contribution": 15
        },
        {
          "id": "credential-theft-risk",
          "kind": "combination",
          "label": "Credential theft risk (high)",
          "description": "Filesystem write combined with credentials access can plant persistent credential stealers.",
          "contribution": 15
        },
        {
          "id": "filesystem-write-shell-risk",
          "kind": "combination",
          "label": "Persistence + execution risk (medium)",
          "description": "Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts).",
          "contribution": 5
        },
        {
          "id": "full-control-risk",
          "kind": "combination",
          "label": "Full-control risk (critical)",
          "description": "Shell + filesystem write + network is effectively a remote shell on the employee machine.",
          "contribution": 25
        }
      ],
      "dangerousCombos": [
        {
          "id": "exfiltration-risk",
          "name": "Data exfiltration risk",
          "description": "Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.",
          "capabilities": [
            "shell:execute",
            "network:outbound"
          ],
          "severity": "high"
        },
        {
          "id": "credential-theft-risk",
          "name": "Credential theft risk",
          "description": "Filesystem write combined with credentials access can plant persistent credential stealers.",
          "capabilities": [
            "filesystem:write",
            "credentials:access"
          ],
          "severity": "high"
        },
        {
          "id": "filesystem-write-shell-risk",
          "name": "Persistence + execution risk",
          "description": "Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts).",
          "capabilities": [
            "shell:execute",
            "filesystem:write"
          ],
          "severity": "medium"
        },
        {
          "id": "full-control-risk",
          "name": "Full-control risk",
          "description": "Shell + filesystem write + network is effectively a remote shell on the employee machine.",
          "capabilities": [
            "shell:execute",
            "filesystem:write",
            "network:outbound"
          ],
          "severity": "critical"
        }
      ]
    },
    "dangerousCombos": [
      {
        "id": "exfiltration-risk",
        "name": "Data exfiltration risk",
        "description": "Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.",
        "capabilities": [
          "shell:execute",
          "network:outbound"
        ],
        "severity": "high"
      },
      {
        "id": "credential-theft-risk",
        "name": "Credential theft risk",
        "description": "Filesystem write combined with credentials access can plant persistent credential stealers.",
        "capabilities": [
          "filesystem:write",
          "credentials:access"
        ],
        "severity": "high"
      },
      {
        "id": "filesystem-write-shell-risk",
        "name": "Persistence + execution risk",
        "description": "Shell execution plus filesystem write means the agent can plant persistent backdoors (e.g. modifying startup scripts).",
        "capabilities": [
          "shell:execute",
          "filesystem:write"
        ],
        "severity": "medium"
      },
      {
        "id": "full-control-risk",
        "name": "Full-control risk",
        "description": "Shell + filesystem write + network is effectively a remote shell on the employee machine.",
        "capabilities": [
          "shell:execute",
          "filesystem:write",
          "network:outbound"
        ],
        "severity": "critical"
      }
    ]
  }
}