Theme Running Code
Flags theme type extensions that run code on the user's machine. Themes should be static JSON files and not execute any code.

Language Server for Papyrus DOCDEF, Syntax Highlighter, Code Validation
Flags theme type extensions that run code on the user's machine. Themes should be static JSON files and not execute any code.
Flags items that automatically install additional extensions as part of their installation. While this is a common way to distribute curated toolsets, it results in other extensions being installed silently - bypassing individual policy evaluation and running code the user never explicitly chose to install.
Flags items that initiate new processes by executing files from local or remote paths. This behavior can be used to run additional code outside the extension’s scope, including potentially malicious payloads. Uncontrolled process execution increases the risk of system compromise.
AI-powered analysis of the extension's source code for security insights and risk assessment.
This Visual Studio Code extension provides language support tools for the Papyrus language, specifically for files with the 'dfa' language identifier. It includes features such as syntax highlighting, code validation, and a preview mechanism for compiled output.
Language Server Integration:
vscode-languageclient to start a language server implemented in Node.js (server.js) for enhanced language features.Command Registration:
papyrus.preview that opens a PDF preview of the compiled output in a side editor pane.File System Watching:
.clientrc files to synchronize with the language server.Compilation on Save:
C:\ISIS\pdew3710\pdew3.exe) with the corresponding .prj project file and a /FORCEPDF=Yes argument to force PDF generation.UI Behavior:
pdf.preview) in a configured view column.Process Execution:
child_process.execFile to run the external compiler.child.execFile('C:\\ISIS\\pdew3710\\pdew3.exe', [prj_file_path, '/FORCEPDF=Yes'], { timeout: ... })
This executes an external binary on the local machine.
The extension reads and writes files within the workspace (e.g., .dfa, .prj, and generated .pdf files).
No network communication, registry access, user creation, clipboard access, or persistence mechanisms are present.
No obfuscation techniques are used; the code is straightforward and readable.
The extension facilitates development in the Papyrus language by integrating a language server and automating compilation with PDF preview. It executes a local compiler binary on save but does not perform network communications or other sensitive operations.
API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.
Any encoded/decoded secrets we managed to find in the source code, git repository, or related files
Known vulnerabilities and security issues detected in the extension's dependencies and code.
Any identifiers we detected that may indicate external communication from the item's code
Dependencies and third-party libraries used by the extension, including version information and license details.