Extensions

AI Java Reviewer

asiff

Enterprise-grade AI Java & Spring Boot Code Reviewer — Automated MR/PR diff review, static analysis, security scanner, and AI explanations.

Arcflow

Veloce-AI

Codebase architecture intelligence — visualize dependency graphs, blast radius, security issues, and design patterns for any GitHub repo or local codebase.

NPM Advisor

AgenticWebLabs

Package intelligence, security insights, dependency analysis, and AI-powered evaluation for npm packages, directly inside VSCode.

Install USA compliance skill packs (HIPAA, PCI-DSS, SOC 2, ISO 27001, NIST CSF, CCPA, FedRAMP, SOX, CMMC, GLBA), starter packs, MCP templates, and runnable examples into a VS Code workspace.

Audit local de code pour VS Code: complexite, secrets, npm audit, ESLint, code mort et prompt d'action pour agent IA.

Entro Security DevGuard

entro-security

Scans for exposed secrets using the Entro Security API.

EnvGuard — Smart .env Manager

GayathriS

Switch environments instantly, validate .env keys, scan for secrets, and diff files — all inside VS Code.

AI-powered supply chain security. Intercepts npm and pip installs and scans with 5 AI agents. Works on macOS, Linux, and Windows. No Docker or server required.

npm-script-lens

Booyaka101

See what install scripts actually do — inline risk in package.json for npm/pnpm/yarn/bun allowlists, plus npm 12 migration checks.

Cycode

cycode

Run Cycode security scans (Secrets, SAST, SCA, IaC) in Azure Pipelines and view an aggregated HTML report in a build results tab.

Blacklock CodeScan

blacklockio

Security scanning powered by Blacklock CodeScan

TrimPrompt CSA — Save 80% on AI Coding Tokens

TrimPromptai

Zero-config token compression and secret redaction for AI coding agents (Claude Code, Cursor, Copilot, Gemini CLI). The CSA Engine — Compression, Security, Audit.