Exact extension version, artifact hash, affected file or dependency, normalized rule identifier, confidence, and scanner ruleset.
manifest/static · credential exposure
Credential command registration
credential-command-registrationA contributed command identifier or label appears credential-related.
Default severityLOWEvidence classexposure
What it means
Read the evidence before the label.
This alert records exposure evidence produced by the manifest/static analyzer. Its default severity describes potential impact, not certainty that an extension is malicious.
A final decision also considers evidence correlation, artifact identity, analysis coverage, and the active policy.
Confirm whether the behavior matches the extension’s declared purpose and whether execution requires explicit user intent.