IDE extension unknown
Risk level
critical
80/100

Blackbox AI ↗

Blackbox AI is an unverified IDE extension from Blackbox. Anomity scores its risk at 80 out of 100 (critical).

filesystem:read network:outbound credentials:access

Analysis summary

Blackbox AI is an unverified IDE extension from Blackbox. Anomity scores its risk at 80 out of 100 (critical).

Blackbox AI is an AI code-search and chat extension that markets itself as an all-in-one developer assistant — autocomplete, chat with the codebase, code-to-image search, and a browser companion. It is one of the higher-installed extensions in the AI category on the VS Code Marketplace, but it is also the entry in Anomity's catalog with the most opaque trust posture: the underlying model and the routing of user prompts are not publicly documented in detail, the vendor's privacy policy has shifted multiple times, and independent audits of what the extension transmits are not readily available.

Declared capabilities include reading files in the open workspace to construct prompts, making outbound network requests to Blackbox's hosted backend, and reading and writing credentials stored in the IDE for the user's Blackbox account. It does not declare filesystem write or shell execution.

Blackbox AI is assigned the unknown trust level in the catalog — the highest trust adjustment — because the publisher's identity is not verifiable to the level of an official marketplace vendor and because the closed backend means the actual data flow cannot be confirmed from the outside. Combined with the credentials + outbound network signal, this is the kind of extension that should be evaluated carefully before installation on machines with access to proprietary code.

Why this entry scored 80 out of 100

This profile starts at the catalog's neutral base of 50. Because the entry is unverified publisher, trust adjusts the score by +20. Declared high-risk capabilities add +10 (capped at +30). It matches no dangerous capability combinations. The clamped result is 80, placing it in the critical band.

See the full scoring formula →

Findings

  • Unknown publisher Critical
    Contribution to score: +20
  • 1 high-risk capability: credentials:access High
    Contribution to score: +10

Capabilities

Every capability the entry declares, with the security implication of each.

  • filesystem:read Filesystem read
    Can read files on the host system. Used for context, indexing, or analysis.
  • network:outbound Outbound network
    Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access.
  • credentials:access Credentials access
    Reads provider API keys, OAuth tokens, or other secrets from the host keychain or environment.