Treat official-looking IDE extensions as supply-chain dependencies: they run…

Treat official-looking IDE extensions as supply-chain dependencies: they run with your user permissions and can reach secrets. The Claude Code compromise shows a signed-seeming bundle can drop SSH keys and persistence, so don’t assume a vendor signature equals safety. Verify publisher identity before admitting extensions, enforce policies that block access to secret stores and env creds, run agents/AI work in isolated ephemeral workspaces, and gate extensions with an allowlist the same way you gate package installation.