sweeper-fix
What this skill does
The skill 'sweeper-fix' is designed to implement narrow, localized fixes for issues in the microsoft/vscode repository based on reviews from the VS Code Sweeper. It fetches fix specifications from a p
github/microsoft - Excessive Agency - 188.5k stars
Threat analysis
Skill info
pkg:github/microsoft/vscode@c886ff4?skill=sweeper-fixAssessments (1)
Excessive Agency
Excessive Agency via local-llm-review
SKILL.md
The skill is instructed to 'implement a narrow, localized fix' and 'open a draft PR' without explicit user confirmation. This could be seen as excessive agency if the user is not explicitly prompted tBadge
Add the Anomity scan badge for sweeper-fix to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of sweeper-fix? Report an issue or request a rescan.
