Extensions
AI Code Exposure Monitor
ConsultantBPMhumansoftware
Live % of your code seen by AI assistants. Detects secrets, passwords, PII exposed to AI tools (Copilot, Claude, Cursor, etc.). 100% local. Works in VS Code, Cursor, Windsurf, VSCodium. MCP + team-work exposure features ready — just ask.
Agent Inspector
AbhineetPandey003
Monitor AI coding agent context, visible files, token usage, and trust signals in VS Code-compatible editors.
StrataMetriq
StrataMetriq
Architecture Intelligence & Pre-Deployment Safety in VS Code
npm-dependency-manager
noritaka1166
Inspect npm dependencies, export CycloneDX and SPDX SBOMs, find outdated packages, vulnerabilities, licenses, and package-lock details from the VS Code sidebar.
ghostchar
valmet083
Detect and decode invisible/dangerous Unicode characters (ASCII smuggling, Trojan Source, zero-width) right in the editor.
Terminal Velocity
CoreyHamren
View and manage your terminal command history in VS Code's Explorer. Includes an Agent Skill so pi, Copilot Chat, and Claude Code can auto-record activity alongside your shell commands.
SonarQube Dashboard & Pipeline
jesusromero
Run SonarQube analysis pipelines and inspect Quality Gates, issues, Security Hotspots, coverage, duplication, and execution history directly in VS Code.
Arcflow
Veloce-AI
Codebase architecture intelligence — visualize dependency graphs, blast radius, security issues, and design patterns for any GitHub repo or local codebase.
EnvRadar
BeFlow
Visual .env manager — diff environments, detect missing vars, catch leaked secrets, and validate env types. The .env tool devs actually need.
PRUVALEX PruvaGraph
PRUVALEX
The unified engine for cost-optimized and secure LLM interactions.
AILINTER — AI Code Safety Visor
ailinter
Code quality scoring, secret detection, and vulnerability scanning with inline decorations, CodeLens, hover guidance, Quick Fixes, and project health sidebar
IjyaLabs DaaCini — Diagram-as-Code
ijyalabs
Live preview + SVG export for DaaCini diagrams-as-code, in VS Code / Cursor / VSCodium. Renders via the hosted IjyaLabs service by default, or your own self-hosted `daacini serve` (source in, SVG out — no engine bundled).