aiXcoder ↗
aiXcoder is a community-maintained IDE extension from aiXcoder. Anomity scores its risk at 50 out of 100 (medium).
Analysis summary
aiXcoder is a community-maintained IDE extension from aiXcoder. Anomity scores its risk at 50 out of 100 (medium).
aiXcoder offers code completion for VS Code and JetBrains with an emphasis on deployable-on-premises models, aimed at organisations that want assistance without source code leaving their network.
In its local deployment the extension reads the workspace and writes accepted completions without outbound network access — a genuinely different risk profile from cloud assistants, and the reason it appears in procurement shortlists for regulated environments. The catalogued capability set reflects the local configuration; a hosted deployment adds outbound network and should be scored as such. Verify which mode is actually configured, because the difference is the entire security argument.
Why this entry scored 50 out of 100
This profile starts at the catalog's neutral base of 50. Because the entry is community-maintained, trust adjusts the score by -10. Declared high-risk capabilities add +10 (capped at +30). It matches no dangerous capability combinations. The clamped result is 50, placing it in the medium band.
Findings
-
Established community project Trust offset
-
1 high-risk capability: filesystem:write High
Capabilities
Every capability the entry declares, with the security implication of each.
-
filesystem:readFilesystem readCan read files on the host system. Used for context, indexing, or analysis. -
filesystem:writeFilesystem writeCan create, edit, or delete files on the host system. High-impact capability — anything from helpful edits to planting persistence.