Guardrails
Check an extension
Sign in
Guardrails CLI

Audit every editor on your machine.

Find extensions across VS Code, Cursor, Windsurf, and VSCodium. Inspect an integrity-checked local snapshot without executing the extension or sending its source to GuardRails.

$ pipx install guardlens
Package: guardlens Command: guardrails Python 3.11+ One self-contained, integrity-checked package
local extension auditprivate

$ guardrails

Installed extensions 143 detected
Cursor 40 VS Code 81 Windsurf 22

› Select an extension to inspect

ANALYSIS COMPLETEDecision: reviewOpen findings, coverage, and report export.
Local inventoryOne view across every supported editor
Exact snapshotResults stay tied to the package you scanned
Zero executionExtension code is inspected, never launched
Private by defaultPackage contents stay on your machine
Choose the right boundary

Two ways to inspect an extension. One evidence standard.

Choose the product based on where the extension is. The analysis boundary stays clear.

Website Deep Scan

Check a package before it reaches an editor.

Search the Marketplace or submit a package for a managed Deep Scan with a shareable report.

Best for evaluating an extension before installation.Open website Deep Scan
Guardrails CLI

Check what is already installed.

Find extensions in VS Code, Cursor, Windsurf, VSCodium, and Insiders, then inspect local snapshots on your machine.

Best for auditing the editor you use today.Install Guardrails CLI

For the same artifact, a properly configured CLI Deep Scan uses the same analysis boundary as website Deep Scan.

Local by design

Your extension code stays on your machine.

Guardrails copies selected extensions into a temporary private snapshot, scans it locally, then removes the snapshot. It never launches extension code.

No code upload

Source files and package contents are not sent to Guardrails.

Verified scanner runtime

The scanner is bundled with Guardrails and checked for unexpected changes before it runs.

Optional intelligence lookups

Deep mode can query Marketplace, dependency, and repository metadata using IDs, versions, dependencies, and URLs.

First local scan

Install once. Start with the extensions you already trust.

The interactive command groups installed extensions by IDE, lets you search before scanning, and produces findings, risk scoring, coverage, and exportable reports.

  1. 01
    Install the CLIpipx install guardlens
  2. 02
    Open the local scannerguardrails
  3. 03
    Use Deep Scan when neededpipx install "guardlens[analysis]"
$ pipx install guardlens
Read analysis boundaries