Analysis
AI security in VS Code
Publication date not yet evaluated · Added visualstudio.com
Page published
Coverage timeline
Single-source advisory — one report is available.
Why it matters
VS Code's agent security controls give defenders concrete configuration levers—sandboxing, trust boundaries, and MCP vetting—to reduce the blast radius of prompt-injection and tool-abuse against AI coding agents.
VS Code documentation describes built-in security controls for AI-powered agentic development, including Workspace Trust restricted mode, agent sandboxing to limit file system and network access, mandatory review of file edits, protection of sensitive files, session-scoped auto-approval, and vetting of MCP servers before trusting them. The page frames these as trust boundaries to limit the impact of autonomous agent actions on untrusted projects.