ToolMaster is a powerful VS Code extension for managing and visualizing tasks from multiple task definition JSON files. It provides a hierarchical tree view in the VS Code Explorer sidebar, allowing users to organize, search, and execute shell commands efficiently.
Visual task browser in the VS Code Explorer sidebar
Expandable/collapsible groups
Icons for different hierarchy levels
Click-to-run functionality
🔍 Search Functionality
Real-time task filtering
Search across task names and group labels
Quick access to specific tasks
⚡ Task Execution
One-click task execution from the tree view
Integrated with VS Code's task system
Shell command execution support
🚀 Auto-Initialization
Automatically creates default task files on first run
Copies template tasks to user's home directory (~/.vscode-tasks/)
Auto-configures settings
🔒 Security
⚠️ IMPORTANT: This extension executes shell commands from JSON files. Always use trusted sources.
⚠️ Potential Risks
Risk
Impact
Mitigation
Command Injection
Arbitrary command execution
Only use trusted task files
Path Traversal
Unauthorized file access
Verify all file paths
Code Execution
System-level access
Review commands before running
Malicious JSON
Unexpected behavior
Validate JSON structure
🛡️ Security Best Practices
For Users
Verify Task Sources
// ❌ DON'T: Use task files from untrusted sources
{
"Tasks.json": [
"/downloaded/unknown-tasks.json"
]
}
// ✅ DO: Use only your own or verified task files
{
"Tasks.json": [
"~/.vscode-tasks/my-tasks.json"
]
}
