Extensions

Zcodee AI — Code analyst and vulnerability Scanner

Sicilylabs

AI-powered vulnerability scanner that analyzes your entire codebase and delivers a prioritized, actionable security report with concrete fix suggestions.

SYNAPTIC Sentinel

RealGoLab

The vibe-coding security sentinel. Apache-2.0 agentic auditing for AI-assisted projects: five scouts (OpenGrep, Gitleaks, Trivy, Checkov, Vibe-Detect) + a Brain Layer (BYOK Anthropic) that triages, explains and remediates — all in the IDE.

Smart Code Review Visualizer

VinayPammi

Companion extension for the smart-code-review Agency plugin. Renders multi-perspective code review findings (security, reliability, performance, coding standards, privacy) as inline VS Code diagnostics, hover tips, and a sidebar dashboard — grounded on the Azure Well-Architected Framework. One-click

StrataMetriq

StrataMetriq

Architecture Intelligence & Pre-Deployment Safety in VS Code

SentryBox Security Scanner

NavadeepBoyana

AI-powered Python package security scanner — auto-scans imports in real-time

manan-kanchu — AI Code Detector

sergioide007

Detect AI-generated code, scan vulnerabilities, audit policies, and protect your codebase with multi-provider AI intelligence.

MunaTrust Code Trust

MunaTrust

AI code trust scanner for detecting risky generated code patterns, exposed secrets, and release trust issues.

Runic Skills

diottodev

145 AI & Dev skills via @runic — type @runic /skill-name in VS Code Copilot Chat. Code review, debug, tests, refactor, docs, agents, security, LLM cost, and more.

OpenShrike

NetworkPerspective

Security-first agentic code reviewer and best-practice auditor built on OpenCode.

SonarQube Dashboard & Pipeline

jesusromero

Run SonarQube analysis pipelines and inspect Quality Gates, issues, Security Hotspots, coverage, duplication, and execution history directly in VS Code.

Custodia — Security & Compliance Autopilot

CustodiaLLC

OWASP Top 10, SOC 2, HIPAA, PCI DSS scanning with inline findings, AI fix prompts, and compliance gap reports. One click.

Shomra — AI Security

Shomra

Gate and fix AI artifacts (MCP servers, Skills, rules, hooks) and flag known-vulnerable AI models right in your editor. Works in VS Code and Cursor.