Manifest
    by Manifold
    Back to Results
    2.0.14

    Nexrall Code - Agent Coding

    Your autonomous AI coding agent for VS Code: reads your codebase, edits files, runs commands and ships work end-to-end — with your approval at every step. One account for every frontier model — up to 1M-token context, MCP tools, checkpoints and granular permissions.

    AIChat
    Rank#339
    Publisher NexrallCodeRegistry openvsx1,160,396Last scanned Oct 7, 2026, 05:59 PMRegistry

    Security Findings

    7

    Prompt injection prose (VSX)

    SuspiciousScanner

    HTML comment hides instruction: ')/.test(line);\n }\n var RULES = [\n // ── Hardcoded credentials ───────────────────────────────────────────────'

    OWASP-AST01OWASP-AST04

    Hardcoded secrets/API keys4×

    SuspiciousScanner

    Secret Keyword: FIREB...****

    Secret Keyword: undef...****

    Secret Keyword: nexra...****

    Private Key: BEGIN...****

    dist/extension.js

    OWASP-AST04

    Sensitive file access2×

    SuspiciousScanner

    Access to sensitive file: ~/.aws

    Access to sensitive file: ~/.ssh

    OWASP-AST03