Manifold now rates the editor extensions your developers install

A manual review covers one version of an extension

If your developers use Cursor or Windsurf (or Antigravity and Kiro for that matter), their extensions come from Open VSX, not Microsoft’s Marketplace. Wherever an extension comes from, it runs inside the editor with the developer's access to their code and build pipeline, and it updates itself. When a team reviews an extension, it signs off on one version. The next one ships without a second look. When a popular extension is only on Microsoft’s Marketplace, anyone can publish a copy under the same name on Open VSX. AI agents and setup scripts install extensions by name, so the copy passes for the original. In August our research team found 77 of these copies on Open VSX. Of those, 19 sent the developer’s repository details and CI identity to an outside server.

Manifest now rates every extension on Open VSX

Manifest, our public AI supply chain intelligence, already rates the MCP servers, skills and plugins that agents load. It now rates editor extensions too. Manifest scans the Open VSX catalog, around 17,000 extensions, every night. The ratings are public under Editor Extensions on the Manifest site, and anyone can search them, with or without a Manifold account. Each rating lists its findings and the files they came from, and checks whether the publisher owns the code repository the extension claims. If Manifest could only scan part of a very large extension and found nothing there, it shows no rating rather than calling the extension clean.

Extensions now appear in your Manifold inventory, next to your agents

Manifold's endpoint collector already reports the AI tools on each developer machine. Every editor extension it finds now shows up in the inventory, with a Manifest tab showing the rating for the installed version. When the rating comes from a different version, the tab says so, for example "Installed 9.0.0 not scanned".

An extension rated critical, high or medium raises a supply chain risk on each AI agent on that machine. The extension sits in the same inventory as the machine's agents, MCP servers, skills and plugins, so your team triages it in the same place as the rest of its agent risk.

Live now for every Manifold customer

Extension ratings are in Manifold now for every customer, with no plan change and nothing to switch on. They need the endpoint collector at version 0.997.2 or newer, and cover VS Code, VS Code Insiders, Cursor, Windsurf, Kiro and Antigravity. Open any editor extension in the inventory, then its Manifest tab. To check an extension before anyone installs it, search Editor Extensions on Manifest.