bundled-skills/vscode-extension-guide-en/SKILL.md
Guide for VS Code extension development from scaffolding to Marketplace publication
npx skillsauth add FrancoStino/opencode-skills-antigravity vscode-extension-guide-enInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
An English guide for building VS Code extensions, covering the full lifecycle from scaffolding to Marketplace publication. Includes reference material on webview patterns, CSP security, TreeView, testing, packaging and troubleshooting. Updated for VS Code 1.74+ APIs.
Adapted from aktsmm/agent-skills (CC BY-NC-SA 4.0), translated to English with corrections for current VS Code APIs.
npm install -g yo generator-code
yo code
my-extension/
├── package.json # Extension manifest
├── src/extension.ts # Entry point
├── out/ # Compiled JS
├── images/icon.png # 128x128 PNG for Marketplace
└── .vscodeignore # Exclude files from VSIX
npm run compile # Build once
npm run watch # Watch mode (F5 to launch debug)
npx @vscode/vsce package # Creates .vsix
The full skill includes detailed reference documents on:
For the complete guide with all reference documents:
npx skills add lewiswigmore/agent-skills --skill vscode-extension-guide-en
.vscodeignoreactivationEvents are auto-detected for contributed commands and viewsProblem: Extension not loading
Solution: Check activationEvents. Since VS Code 1.74, these are auto-detected for contributed commands/views.
Problem: Command not found Solution: Match the command ID exactly between package.json and your code.
Problem: Webview content not displaying
Solution: Check your Content Security Policy. Use the webview's cspSource property.
@test-driven-development - Write tests before implementing extension features@debugging-strategies - Systematic troubleshooting for extension issuestools
Authorized security assessment of LLM applications and AI agents: prompt injection, tool abuse, RAG exposure, memory poisoning, system-prompt extraction, and agent-compliance engineering per OWASP LLM/ASI Top 10.
development
Builds two parameterized UI modes—流光溢彩白 (iridescent white) and 五彩斑斓黑 (colorful black)—with OKLCH, WebGL/CSS fallback, vision gating, screenshot QA, and total/per-color intensity reports. Use when a UI request names either mode or needs measured color parameters.
tools
Delegate coding tasks to the Kimi Code CLI (`kimi`) only when the user explicitly requests it, while the orchestrator retains review and landing responsibility.
development
Front-end JavaScript reverse engineering: locate signature chains, analyze encrypted request parameters, sample runtime behavior, and reproduce logic locally in Node for evidence-based output.