Extensions
PG Memory Bank
pgdigitalglobal
Memory-bank governance and production-readiness checks in your editor. Code narration, security and frontend policy gates, and TapSign device-bound approval.
IAPL - Profile FLS
ion-andoni-palma
Manage Salesforce profile FLS in git: retrieve permissions from any authorized org and upsert into repo profiles.
Agent Loop Guard
RIMUMURUDEV
Start and monitor the local Agent Loop Guard gateway from VS Code.
SafeRelay — DevSec DLP
LogicGridAI
Local-first data-loss prevention for developers. Redacts API keys, secrets, PII, and CUI markings before code or text reaches AI assistants like Copilot, ChatGPT, or Claude. 65+ patterns, air-gap friendly, zero telemetry.
Debuggatha
SxnnysideProject
The engineering reviewer that remembers — every finding traced to a real rule, tracked from open to resolved, judged against the repo you actually wrote.
Mutant Language Tools
aoiflux
Language tools for Mutant, powered by a dedicated language server: strict canonical formatting, rich diagnostics (OS-aware platform warnings, unreachable code, unused/undefined/duplicate checks, semicolons), hover with capability categories, completion, semantic highlighting, go-to-definition, refer
Scrutora Scan
Scrutora
Offline DPDPA / HIPAA / GDPR / PCI-DSS / RBI compliance scanning for Azure Pipelines. No API key; your code never leaves the agent. SARIF output.
Tegin Env Manager
teginsoft
Compare .env, .env.local, .env.production and other env files side by side in a table, spot missing variables at a glance, and generate .env.example in one click.
Passwords
passwordslu
Generate passwords, passphrases, PINs, API keys, and usernames in VS Code. From passwords.lu — local generation and strength checks, optional breach lookup, copy/insert/share via PrivateNote.
Thesmos Governance
holleystudio
Real-time AI repo governance — inline findings, health scores, and adapter sync for Claude, Gemini, Cursor, Copilot, and Codex.
Shieldly — AI-Powered Security Analyzer for AWS
shieldly
AI-Powered Security Analysis for AWS IAM policies, CloudFormation templates, and resource policies. Find risks before they reach production.
oauthlint
auspeo
Catch the OAuth/OIDC/JWT/MCP anti-patterns AI coding tools produce across eleven languages (JS/TS, Python, Go, C#, and more) plus mobile (Swift/iOS, Android), right inside VS Code, Cursor, Windsurf, and other VS Code forks.