VSCan: What Scanning Malicious VSCode Extensions Reveals About Agent Tool Privilege Boundaries
VSCode extensions inherit full system access. So do agent tools. VSCan's detection heuristics expose the privilege boundary problem both ecosystems face.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.