Habr•October 20, 2026•🇷🇺Translated from Russian

Skycode: Custom VS Code Extension Optimizes AI Coding Agent for Corporate Closed-Loop LLMs

A Russian developer has published Skycode, an open-source VS Code extension that turns the editor into a capable AI coding agent designed specifically for corporate closed-loop environments.

The tool was created because popular assistants such as GitHub Copilot and Cursor send code to external servers, which is unacceptable in regulated sectors such as energy where information security teams maintain strict data boundaries. Instead, the organization operates an internal gateway running the Qwen model, which delivers good performance on short tasks but is constrained by an approximately 100 000-token context window.

To stay within this limit the extension implements several context-saving techniques: files are read line-by-line or via a dedicated read_symbol tool that extracts only individual methods or classes; unchanged files are replaced with a short “file unchanged” marker on subsequent reads; terminal output is truncated to beginning and end; and the entire conversation history is summarized when the context approaches its ceiling. A visual ring indicator shows exactly how much of the context is consumed by files, command output, or history.

Additional safeguards prevent common model misbehaviors. Temperature settings were adjusted to reduce repetitive loops, and the agent now prompts the model to continue when it stops after writing a single sentence. If an answer is cut off mid-file write because of length limits, the partial file is discarded and the model receives guidance to split the work into smaller steps.

Users can open multiple independent tasks in separate tabs that run in parallel while the developer continues editing. Messages queue automatically, and a second Enter key press interrupts the agent for urgent input. The extension can also render diagrams and tables directly in chat that can be copied into Word or Excel.

For voice input inside the air-gapped network the developer replaced Whisper with GigaAM v3 from Sber, which transcribes 17 seconds of Russian speech in roughly one second on a standard CPU and inserts punctuation without requiring an internet connection after the initial model download.

Although the author considered forking the entire VS Code codebase like Cursor, the maintenance burden proved unsustainable. The final decision to ship an ordinary extension simplified both updates and internal security reviews, because many companies already allow Marketplace extensions and the extension communicates only with the internal LLM gateway.

Skycode is free and open source. The project page and GitHub repository are available for organizations that already run internal models such as Qwen or GigaChat and need an agent that respects strict context and data-residency constraints.

Related articles

Security NEXT•AI Security

NICT and MITRE to Host AI Breach Challenge 2026 on Email Agent Security

The National Institute of Information and Communications Technology (NICT) and MITRE are organizing the AI Breach Challenge 2026: Email Agent Security competition in December 2026. The event will take place at George Mason University in Virginia and will focus on identifying security weaknesses in AI agents designed for workplace email operations. Participants will work in teams of two to four people, combining on-site and remote access over a 24-hour period on December 16 and 17. They will attempt to induce unintended behaviors in the agents and gain access to protected information within an isolated environment. NICT plans to analyze the results to evaluate the effectiveness and limitations of current AI agent security measures for future research and development.

Securitylab•AI Security

AI Agents Becoming Core InfoSec Skill Like Microsoft Office Proficiency

Working with AI in information security is shifting from a specialized skill to a baseline expectation similar to using Microsoft Office tools. The key difference lies in the cost of errors: poor Word usage wastes time, while mishandling AI agents burns subscription limits and corporate funds. The article details practical workshops from the Engineering October series covering AI agents from beginner tools to securing the agents themselves. Core concepts include distinguishing models from agents, managing context windows to prevent forgotten instructions, and using skills, MCP connectors, and sub-agents for efficiency. Real-world examples show agents handling CVE analysis, alert triage, and threat report reviews while highlighting risks like hallucinations and data exposure. Guidance covers safe deployment in isolated environments and the irreplaceable role of human expertise in strategy and verification.

Habr•AI Security

Research Exposes Limitations in AI Skill Scanners for Agent Vulnerability Detection

An independent researcher evaluated three local vulnerability scanners for AI agent skill packages without using LLMs or external APIs. The test used 12 synthetic packages containing both benign and malicious instructions, including attempts to bypass consent via sub-agents and hidden instructions in nested files. Cisco Skill Scanner, NVIDIA SkillSpector, and AgentVerus were run in isolated containers. All three tools missed a critical delegation bypass in package 10, while correctly flagging an educational attack citation in package 5 as High severity. NVIDIA SkillSpector performed best on nested file detection, and the findings directly shaped the integration of a lightweight static analyzer plus optional NVIDIA scans into the CEO AI project. The study also highlighted the need to preserve detailed findings rather than relying solely on final safety scores.

AntiMalware•AI Security

Apple Tightens App Store Rules Against Non-Consensual Intimate AI Deepfakes

Apple has updated its App Store guidelines to explicitly prohibit applications that generate intimate deepfake images of real individuals without consent. Developers must now implement measures to prevent creation and distribution of such content and promptly remove any instances that appear. The company also banned the practice of submitting apps with hidden functionality that is activated after passing review, a tactic previously used by undressing services. Violations can result in both app removal and expulsion from the Apple Developer Program. The move follows similar actions against xAI's Grok chatbot, which added safeguards after Apple threatened removal over the same issue. The policy targets non-consensual intimate imagery rather than all deepfake technology.