code-server
Manages code-server for a browser-based VS Code experience, enabling remote development with configuration and extension management.
Install this skill
or
65/100
Security score
The code-server skill was audited on Mar 1, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 269
Curl to non-GitHub URL
SourceSKILL.md
| 269 | curl -s https://open-vsx.org/api/-/search?query=python | head -c 100 |
medium line 27
Access to hidden dotfiles in home directory
SourceSKILL.md
| 27 | - Install it to `~/.local/bin/code-server` |
medium line 28
Access to hidden dotfiles in home directory
SourceSKILL.md
| 28 | - Create a default config at `~/.config/code-server/config.yaml` |
medium line 37
Access to hidden dotfiles in home directory
SourceSKILL.md
| 37 | Access at `http://localhost:8443` — password is in `~/.config/code-server/config.yaml`. |
medium line 156
Access to hidden dotfiles in home directory
SourceSKILL.md
| 156 | ### Config File (`~/.config/code-server/config.yaml`) |
low line 243
Access to hidden dotfiles in home directory
SourceSKILL.md
| 243 | echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.bashrc |
medium line 252
Access to hidden dotfiles in home directory
SourceSKILL.md
| 252 | 1. Bind address includes `0.0.0.0`: `grep bind-addr ~/.config/code-server/config.yaml` |
low line 37
External URL reference
SourceSKILL.md
| 37 | Access at `http://localhost:8443` — password is in `~/.config/code-server/config.yaml`. |
low line 79
External URL reference
SourceSKILL.md
| 79 | URL: http://0.0.0.0:8443 |
low line 269
External URL reference
SourceSKILL.md
| 269 | curl -s https://open-vsx.org/api/-/search?query=python | head -c 100 |
low line 272
External URL reference
SourceSKILL.md
| 272 | # Some extensions may not be available — check https://open-vsx.org |
Scanned on Mar 1, 2026
View Security DashboardInstall this skill with one command
/learn @faahim/code-serverRate this skill
Categorydevelopment
UpdatedMarch 29, 2026
openclawdevopsbackenddevops-srefrontend-developerbackend-developerfullstack-developertechnical-pmdockerdevelopmentproduct
faahim/openclaw-skills