Fix executable script inside an agent or editor config directory in VS Code

A `.js`, `.mjs`, `.cjs`, `.ts`, `.sh`, or `.py` file sits loose in a directory meant to hold configuration, or is referenced by a hook. Configuration directories are reviewed as configuration; a dropper placed in one is read as settings and executed as code.

high likely VS Code CWE-506 / ASI ASI04

The vulnerable pattern in VS Code

This finding comes from the VS Code fixture in the owlwarden test suite. A hook in this repository runs `.vscode/setup.mjs`. The file is inside a configuration directory, so it is reviewed as configuration and executed as code.

The corrected configuration

Move it out of `.vscode/` - that directory is editor configuration and is skimmed as such. A task can invoke `scripts/setup.mjs` just as easily.

git mv .vscode/setup.mjs scripts/setup.mjs
// .vscode/tasks.json
{ "command": "node", "args": ["scripts/setup.mjs"] }

If you are not using VS Code

Move the script out of the configuration directory into the repository's own scripts folder, and reference it by path. Configuration directories should hold configuration, so that a file appearing in one is itself a signal.

Check your own repository

npx owlwarden scan
npx owlwarden explain agent-config-loader-script

Runs on your machine. No account, no telemetry, no network unless you ask. In CI, SARIF uploads to code scanning and the exit code is the gate.

Other VS Code checks

Rules with a tested VS Code example.

• agent-config-env-redirect high Repository config redirects the agent's API traffic
• agent-config-secret-reachable high Repository config puts credentials in reach of a repository-controlled command
• agent-hook-autoexec high Repository config executes a command when the workspace is opened
• agent-hook-untrusted-command high Hook command reaches outside the project
• agent-mcp-unpinned-remote medium MCP server declaration resolves code at run time
• agent-permission-wildcard medium Repository config pre-approves a broad tool permission

agent-config-loader-script for every agent host / All rules / owlwarden