Host bundle that leaves work inside the workspace untouched and judges only the extra permission a call asks for: reads, network traffic, temp files, package caches and project writes pass; system state changes and writes outside the project ask once, with a deterministic impact analysis; machine- or session-destroying actions are refused; at most one confirmation is outstanding at a time.
This plugin has not published an npm package, so the store does not offer an install command yet. Use the repository link below to view the source.