VS Code Tasks and Launch Configuration Safety Review (Defensive)
Check that workspace files cannot run unsafe commands.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review the tasks.json, launch.json and settings in a repository I am about to open or share, as a defensive review of configuration I am responsible for; do not write malicious configurations. Contents: [CONFIG_FILES]. Source of the repository (own team, outside contributor, unknown): [SOURCE]. Explain in plain words why opening an untrusted folder can be risky and how workspace trust helps [VERIFY]. Be specific about which lines concern you and why, and say if the configuration looks safe. Check for tasks or launch settings that run shell commands automatically, download and execute scripts, send data to external addresses, read environment files, modify files outside the project, or run on folder open. Rate each item and propose safer alternatives. Return a table (Item, What it does, Risk, Action), a rule (open unknown repositories in restricted mode, read configuration first, use a disposable environment for unfamiliar code), and a checklist for reviewing pull requests that change these files.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.