Safe GH Impact Demo

A non-malicious proof-of-concept VS Code Web extension that demonstrates the potential impact of unauthorized extension installation.

The extension safely shows:

• Workspace file enumeration
• Detection of sensitive filenames
• Local-only file reads (hash + size only)
• A harmless comment insertion
• Observation of editor events

No data is exfiltrated. No destructive actions are performed.

Intended for security research and responsible disclosure only.