VS Code extensions run with your permissions while installs and badges are weak trust signals. Learn how to audit, pin, allowlist, and contain them.
Research topic
Developer Security
2 ack3 research articles about Developer Security, with linked authors, definitions, and primary technical context.
A staged workflow for reviewing unfamiliar repositories with AI agents using read-only mounts, no credentials, restricted networks, and disposable sandboxes.