Security audit
Workspace Sharing & Sync
Security checks across malware telemetry and agentic risk
Overview
This workspace-sync plugin is mostly aligned with its purpose, but it packages a real-looking MongoDB credential and can automatically sync, write, and delete local files across machines.
Review carefully before installing. The sync behavior is expected for this type of plugin, but only use it with a dedicated folder and your own MongoDB database. Do not use the bundled .env credential; remove it, rotate any exposed secret, and configure your own MongoDB URI before enabling auto-sync.
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.
Static analysis
No suspicious patterns detected.