powershell-vsdevshell — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited powershell-vsdevshell (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill whenever a Windows VS Code repository task involves PowerShell scripts, repo setup scripts, build scripts, wrapper scripts, generated scripts, native executable calls, Visual Studio Developer Shell setup, MSBuild, MSVC, embedded Python, logs, reports, prompts, or artifact routing.
This skill is portable guidance for ANY Windows repo. Adapt examples to the current repository's roots and conventions. Rules drawn from field experience are labeled as practical tips in the reference topics.
<WORK_ROOT>, <REPORTS_ROOT>, <PROMPTS_ROOT>).pwsh; declare #Requires -Version 5.1 where it matters.$LASTEXITCODE immediately.VSCMD_VER, arch variables, tools, INCLUDE/LIB).py_compile for Python), exit codes, and output routing before claiming success; end with a deterministic status.??, ??=, ?., &&/|| chains, ForEach-Object -Parallel, Join-String) unless the task explicitly targets pwsh.pwsh being installed.vswhere.exe is on PATH or that Visual Studio lives at exactly one path; do not mix Visual Studio versions or switch developer environments inside one shell.$? after grouping parentheses in 5.1..agents\skills.# Native call with verified exit code
$exe = '<TOOLS_ROOT>\tool.exe'
$argv = @('--input', '<WORK_ROOT>\input file.txt')
& $exe @argv
if ($LASTEXITCODE -ne 0) { throw ('tool failed: {0}' -f $LASTEXITCODE) }
# Developer Shell: load once, verify, then build
if ([string]::IsNullOrWhiteSpace($Env:VSCMD_VER)) {
& '<VSINSTALLDIR>\Common7\Tools\Launch-VsDevShell.ps1' -Arch amd64 -HostArch amd64 -SkipAutomaticLocation
}
if ([string]::IsNullOrWhiteSpace($Env:INCLUDE)) { throw 'MSVC environment not loaded.' }
& msbuild '<REPO_ROOT>\Project.sln' -m -p:Configuration=Release -p:Platform=x64Start with references\INDEX.md, then open the topic that matches the task:
references\ps51-pitfalls-checklist.md - preflight checklist; scan before any PowerShell edit.references\powershell-5-1-compatibility.md - PS7-only syntax table with 5.1-safe alternatives; #Requires; AST parse pattern.references\quoting-and-native-commands.md - call operator, argument arrays, --%, $LASTEXITCODE vs $?, stderr semantics, tool examples.references\arrays-hashtables-functions.md - arrays/List[T], -join/-split, [ordered], array-filtering comparisons, function/param style.references\errors-exit-codes-and-logging.md - terminating vs non-terminating errors, -ErrorAction Stop, phase-marker logging, status labels.references\files-paths-and-encoding.md - Join-Path/Test-Path/Resolve-Path, 5.1 encoding + BOM, BOM-less .NET writer, long paths, artifact routing.references\visual-studio-devshell.md - Launch-VsDevShell.ps1 vs VsDevCmd.bat, -Arch/-HostArch/-SkipAutomaticLocation, vswhere discovery, verification checklist.references\msbuild-msvc-build-tools.md - MSBuild switches (-m, -t:, -p:, -restore, -bl), MSVC environment verification, build reporting.references\embedded-python-in-powershell.md - single-quoted line arrays, argv/env/JSON value injection, py_compile, encoding both directions.references\validation-and-ast-checks.md - AST parse, smoke tests, JSON/JSONL line validation, exit-code assertions, output confirmation.references\vscode-repo-agent-patterns.md - detecting repo conventions, placeholder roots, artifact hygiene, skill metadata maintenance.This skill is a practical checklist and navigation layer, not a replacement for the underlying tool documentation.
Recurring failure modes and what to do instead live in the sibling GOTCHA.md.
Includes original content written for this skill, informed by: Microsoft Learn (PowerShell about_* topics, the Visual Studio Developer Shell, MSBuild, and C++ command-line docs) and the Python, Rust Cargo, and npm documentation.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.