Guardrails
Check an extension
Sign in
Back to extension profile
Extension Security Summary

Pylance

ms-python.vscode-pylance@2026.3.1
Security outcomeDo not install

Prevent execution pending review: high-confidence abuse-chain evidence matched (remote-vsix-install-chain). This is a preventive policy decision, not a confirmed-malicious label.

Checked version2026.3.1
Analysis statusCompleted
Scan date—
What this means

The key information before you install.

This is a plain-language summary of the completed analysis for this exact extension version. Technical evidence and workspace actions are available after sign-in.

Permission Passport · exact release

What this extension can reach.

Six consistent access categories, tied to version 2026.3.1. Capability describes power—not malicious intent.

Current analysisLatest release @2026.3.1
2 categories observed@2026.3.1 analyzed releaseBound artifact identity
Workspace and filesystem accessFiles

Filesystem

Observed
Commands, processes, and install scriptsTerminal

Not observed in this scan—not a guarantee of absence.

Not observed
Outbound connections and remote servicesNetwork

Network

Observed
Credentials, environment, and sensitive configurationSecrets

Not observed in this scan—not a guarantee of absence.

Not observed
Editor commands, webviews, and user interactionEditor

Not observed in this scan—not a guarantee of absence.

Not observed
AI models, autonomous tools, MCP, and delegationAgents & tools

Not observed in this scan—not a guarantee of absence.

Not observed
This passport never carries forward to another version.
Review evidence
Release context

Versions

2026.3.1Do not install2026.2.109Not analyzed2026.2.108Not analyzed2026.2.107Not analyzed2026.2.106Not analyzed2026.2.105Not analyzed