# anthropic.claude-code@2.1.322+darwin-arm64 security report (VS Code Marketplace)

- Verdict: **Partly reviewed** (risk level: low, reviewed files only)
- Scanned: 2026-11-10T19:29:26.000Z
- Files reviewed: 1
- Files not reviewed: 2 files (too large)
- Findings: 3 low severity findings
- Report: https://security.togoder.click/vscode/anthropic.claude-code
- Source: Togoder Security (https://security.togoder.click), AI source-code review

## Summary

Togoder Security scanned the VS Code Marketplace package anthropic.claude-code@2.1.322+darwin-arm64 on Nov 10, 2026. An AI review of 1 source file produced 3 low severity findings. No malicious behavior was identified in the reviewed files, but 2 files were not reviewed (too large), so this version is not fully cleared: check those files before relying on it.

## Findings

### [low] startup activation

Finding ID: `NPS-3B44D0F58BDE`

File: `package.json:27`

The extension activates on 'onStartupFinished', so its code loads at every editor start. A chat/agent extension is expected to register its views, webview panels and keybindings at startup; nothing in the manifest points to hidden code — 'main' is the ordinary './extension.js'. Notable for transparency but consistent with purpose.

### [low] untrusted workspace unsupported

Finding ID: `NPS-DFD31CF33C6C`

File: `package.json:704`

The extension declares it does not support untrusted workspaces, which is appropriate for an agent that reads and writes files and runs a process; it is a safety posture, not a risk.

### [low] manifest typo

Finding ID: `NPS-D2684068C66F`

File: `package.json:705`

Descriptions contain minor typos ('untusted'). Cosmetic only.

## Files reviewed

- `package.json` (low): 3 findings

## Files not reviewed

Not covered by the verdict above.

- `extension.js`: Not reviewed: file too large (3495KB > 1024KB)
- `webview/index.js`: Not reviewed: file too large (5906KB > 1024KB)

AI analysis is guidance, not a guarantee. Methodology: https://security.togoder.click/methodology