{
  "entry": {
    "kind": "extension",
    "slug": "qodo",
    "name": "Qodo (Codium)",
    "vendor": "Qodo",
    "description": "Qodo, formerly known as CodiumAI, is an AI extension focused on test generation and automated code review rather than the general chat-and-completion category. Inside the IDE it reads the function the developer is working on, proposes a set of behavioral tests, and surfaces likely edge-case failures; in the pull request flow it leaves contextual review comments on changed code through a companion GitHub app.\n\nDeclared capabilities include reading files in the open workspace to gather context for test generation and review, making outbound network requests to Qodo's hosted service for model inference, and accessing the user's Qodo and provider credentials stored in the IDE secret store. The extension does not request filesystem write or shell execute permissions — generated tests are inserted by the IDE on acceptance, and any test execution happens through the user's own commands.\n\nQodo is community trust because it is an independent vendor. The credential plus outbound network pairing produces a routine risk signal but does not match any dangerous combination. The notable cost is the same as any SaaS coding assistant: the source code being reviewed is transmitted to the vendor on each request, so teams in regulated environments should validate the data-handling agreement before rollout.",
    "website": "https://qodo.ai",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "community",
    "capabilities": [
      "filesystem:read",
      "network:outbound",
      "credentials:access"
    ],
    "packaging": {
      "manager": "vsix",
      "packageName": "Codium.codium"
    },
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02T18:21:41.256Z",
    "risk": {
      "score": 50,
      "band": "medium",
      "signals": [
        {
          "id": "trust-community",
          "kind": "trust",
          "label": "Established community project",
          "contribution": -10
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "1 high-risk capability: credentials:access",
          "contribution": 10
        }
      ],
      "dangerousCombos": []
    },
    "dangerousCombos": []
  }
}