Extensions

Norma: AI Code Governance

QualityClouds

Checks AI-generated code against your standards. Same rules, same verdict, every run.

AuraWatch Enterprise Security

optirefine

Deterministic AST + Z3 Symbolic Code Security Scanner and Auto-Fixer.

pyobfus — Python Code Obfuscator

zhurong2020

Inline risk diagnostics + reverse-mapped stack traces for pyobfus, the open-source AST-based Python obfuscator. Open source, OpenSSF Best Practices verified, PEP 740 attested releases.

Cursor Privacy Shield

speedfenix

Protect private data before it reaches AI models. Scans prompts, blocks sensitive files, and audits what Cursor sends.

Prompt Compass

mpcfintech

Prompt router & firewall: keeps simple prompts on your local model, sends complex ones to the cloud, and blocks PII / jailbreaks. Uses the hosted Compass API.

vuln.mlab.sh SBOM scan

mlab-sh

Manually scan lockfiles for known CVEs via vuln.mlab.sh. No automatic scanning; you decide when a lockfile leaves your machine.

ExtShield — Zero-Trust Extension Monitor

AnandShah

Monitors file access, network calls, and secret usage by other installed VS Code extensions, and lets you set best-effort access policies per extension.

DotCloak - Secure .env File Editor

wagekusuma

Secure editor for .env files with automatic secret masking, streaming protection, and privacy controls

KShield — Inline Security Scanner

YTTGlobal

Real-time inline security warnings, secret detection, and one-click fixes powered by your local KShield backend.

Keep

keep

Secure environment management from VS Code.

Envault

envault

Secure environment management from VS Code.

Thuban — AI Code Verification

thuban

Real-time code intelligence: security scanning, AI hallucination detection, dead code, clone detection, and trust scoring for 120+ languages.