Manifest
    by Manifold
    Back to Results
    1.67.2

    Abacus AI Agent

    AI-powered coding assistant for VS Code

    AIProgramming Languages
    Rank#-396
    Publisher abacusaiRegistry openvsx144,954Last scanned Oct 21, 2026, 06:30 PMRegistryHomepageGitHub
    Created
    2 years ago
    Last commit
    10 months ago
    Latest release
    2.3.43 days ago

    Security Findings

    10

    No license file

    SuspiciousLineage

    No license file at the repo root and GitHub's licenseInfo is empty — code's legal status is unclear

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Download-and-execute in dist/extension/builtins.generated-Dw_4D02s.js: curl -fsSL https://static.abacus.ai/cli/install.sh | bash

    dist/extension/builtins.generated-Dw_4D02s.js

    OWASP-AST06

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Fetched content reaches a dynamic exec sink in dist/webview/assets/katex-CXMH3UgJ.js: fetch(

    dist/webview/assets/katex-CXMH3UgJ.js

    OWASP-AST06

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: servi...****

    dist/extension/resolve-language-model-VW5rjfMp.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: Proxy...****

    dist/extension/index.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: local...****

    dist/webview/assets/index-BmPTB0ar.js

    OWASP-AST04

    Sensitive file access3×

    SuspiciousScanner

    Access to sensitive file: homedir();function M(e){return e===`~`?Pl:e.startsWith(`~/`)?T.join(Pl,e.slice(2)):e}function Fl(e,t){return T.isAbsolut...

    Access to sensitive file: /etc/sudoers

    Access to sensitive file: ~/.ssh

    OWASP-AST03

    Dangerous security bypass flags

    SuspiciousScanner

    Bypass flag in content: --trust

    OWASP-AST06