Back to extension profile

Extension Security Summary

Claude Code for VS Code

Anthropic.claude-code@2.1.238

Security outcomeReview needed

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Checked version2.1.238

Analysis statusCompleted

Scan date—

What this means

The key information before you install.

This is a plain-language summary of the completed analysis for this exact extension version. Technical evidence and workspace actions are available after sign-in.

Permission Passport · exact release

What this extension can reach.

Six consistent access categories, tied to version 2.1.238. Capability describes power—not malicious intent.

Newer release availableLatest is @2.1.240

3 categories observed@2.1.238 analyzed releaseBound artifact identity

Workspace and filesystem accessFiles

Filesystem

Observed

Commands, processes, and install scriptsTerminal

Process Execution

Observed

Outbound connections and remote servicesNetwork

Network

Observed

Credentials, environment, and sensitive configurationSecrets

Not observed in this scan—not a guarantee of absence.

Not observed

Editor commands, webviews, and user interactionEditor

Not observed in this scan—not a guarantee of absence.

Not observed

AI models, autonomous tools, MCP, and delegationAgents & tools

Not observed in this scan—not a guarantee of absence.

Not observed

Release context

Versions

2.1.240Not analyzed 2.1.193Not analyzed 2.1.219Not analyzed 2.1.221Not analyzed 2.1.233Not analyzed 2.1.234Not analyzed