Guardrails
Sign in
Exact artifact intelligence

GitHub Copilot Chat

GitHub.copilot-chat@0.48.1
Security outcomeReview needed

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

100% analysis coverage · exact version only
GitHubvs-marketplaceArtifact 7852df60c171be0b
Security brief

Review decision-relevant behavior before installation.

Review the grouped evidence, affected locations, and whether each behavior matches the extension’s purpose.

80/100Review needed

Diagnostic risk index for this exact artifact — not a probability of malice.

OutcomeReview needed

Policy result for this exact artifact

Coverage
100

Required analyzers completed

Malware signal
0

Diagnostic index, not probability

Evidence groups11

13 contextual groups kept separate

Capabilities13

Power describes access, not intent

Why this outcome

11 behavior groups need context before approval.

@github/copilot@1.0.39 has 1 OSV finding(s). Version match: exact.

Exact artifact7852df60c171be0b59b66c0bb317e778c8c3e233a0f3f524d04bbfebe03aa1d6

Build fedc47d31ef5 · ruleset 2026.07.19

Evidence that drives review
HIGH
@github/copilot@1.0.39 has 1 OSV finding(s). Version match: exact.

7 observed locations · review evidence

MEDIUM
Call target resolved via computed member access: u[...](...) (line 7)

8 observed locations · review evidence

MEDIUM
Extension contributes agent-facing capability: languageModelTools.

2 observed locations · review evidence