continuedev/continue agent hook
coding agent
Continue is an open-source coding agent available as a CLI, VS Code extension, and JetBrains plugin. The repository is no longer actively maintained as of the final 2.0.0 release, though the codebase remains available under Apache 2.0 license for reference and as a foundation for other projects.
Install the VS Code extension from the Marketplace or OpenVSX Registry for IDE-integrated coding assistance Use the CLI tool via npm for command-line access to the coding agent Reference the codebase as a foundation for building your own AI developer tooling Consult the documentation at docs.continue.dev to understand how to configure and customize the agent 10 CRITICAL✓ 6 HIGH✓ 17 MEDIUM 4 LOW
✓ CRITICAL/HIGH reflect AI-verified findings (false positives excluded) · MEDIUM/LOW/INFO are unverified scanner output
AI-verified (CRITICAL/HIGH): 16 likely real (100%) 8 false positive — excluded from CRITICAL/HIGH count above
Findings by checker · 3 high-signal, 4 mostly false-positive (hidden by default)
CHK-081 11 findings 10 likely 1 false positive
9% FP CHK-099 6 findings 4 likely 2 false positive
33% FP CHK-083 1 finding 1 likely
0% FP ▼ Show 4 checkers that are mostly false positives (6 findings) 37 findings click to expand
CHK-081 Command injection risk — exec/execSync with string interpolation in extensions/cli/src/commands/review/diffContext.ts
extensions/cli/src/commands/review/diffContext.ts
AI: likely real fp ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in extensions/cli/src/util/git.ts
extensions/cli/src/util/git.ts
AI: likely real fp ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in core/context/providers/GreptileContextProvider.ts
core/context/providers/GreptileContextProvider.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in core/indexing/docs/DocsService.ts
core/indexing/docs/DocsService.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in core/llm/llms/Docker.ts
core/llm/llms/Docker.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in core/util/tts.ts
core/util/tts.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in core/control-plane/mdm/mdm.ts
core/control-plane/mdm/mdm.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in extensions/vscode/scripts/package-all.js
extensions/vscode/scripts/package-all.js
AI: likely real fp ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in core/indexing/docs/migrations.ts
core/indexing/docs/migrations.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in extensions/cli/src/commands/review/worktree.ts
extensions/cli/src/commands/review/worktree.ts
AI: likely real fp ▼
CHK-099 Potential IDOR — 'id' accessed without ownership check
extensions/vscode/src/util/FileSearch.ts
AI: likely real possible ▼
CHK-105 Secret echoed to CI logs in .github/workflows/vscode-version-bump.yml
.github/workflows/vscode-version-bump.yml
AI: likely real likely ▼
CHK-083 Potential path traversal — user-controlled path in file operation: packages/continue-sdk/python/api/openapi_client/api_client.py
packages/continue-sdk/python/api/openapi_client/api_client.py
AI: likely real possible ▼
CHK-099 Potential IDOR — 'id' accessed without ownership check
packages/terminal-security/src/evaluateTerminalCommandSecurity.ts
AI: likely real possible ▼
CHK-099 Potential IDOR — 'id' accessed without ownership check
manual-testing-sandbox/next-edit/next-edit-9-5-sol.ts
AI: likely real possible ▼
CHK-099 Potential IDOR — 'id' accessed without ownership check
manual-testing-sandbox/next-edit/next-edit-4-2-sol.ts
AI: likely real possible ▼
CHK-073 Curl Pipe Bash Install detected in README.md [test context]
README.md
possible ▼
CHK-054 Tool 'read_file' — generic name without namespace prefix (shadow risk)
packages/openai-adapters/src/test/anthropic-caching-scenarios.live.test.ts
possible ▼
CHK-054 Tool 'write_file' — generic name without namespace prefix (shadow risk)
packages/openai-adapters/src/test/anthropic-caching-scenarios.live.test.ts
possible ▼
CHK-054 Tool 'list_files' — generic name without namespace prefix (shadow risk)
packages/openai-adapters/src/test/anthropic-caching-scenarios.live.test.ts
possible ▼
CHK-054 Tool 'list_files' — generic name without namespace prefix (shadow risk)
packages/openai-adapters/src/test/anthropic-caching.live.test.ts
possible ▼
CHK-054 Tool 'read_file' — generic name without namespace prefix (shadow risk)
extensions/cli/src/tools/applyToolOverrides.test.ts
possible ▼
CHK-054 Tool 'write_file' — generic name without namespace prefix (shadow risk)
extensions/cli/src/tools/applyToolOverrides.test.ts
possible ▼
CHK-054 Tool 'read_file' — generic name without namespace prefix (shadow risk)
extensions/cli/src/util/tokenizer.test.ts
possible ▼
CHK-054 Tool 'write_file' — generic name without namespace prefix (shadow risk)
extensions/cli/src/util/tokenizer.test.ts
possible ▼
CHK-054 Tool 'search' — generic name without namespace prefix (shadow risk)
extensions/cli/src/util/tokenizer.test.ts
possible ▼
CHK-054 Tool 'login' — generic name without namespace prefix (shadow risk)
extensions/cli/src/commands/commands.ts
possible ▼
CHK-054 Tool 'update' — generic name without namespace prefix (shadow risk)
extensions/cli/src/commands/commands.ts
possible ▼
CHK-054 Tool 'login' — generic name without namespace prefix (shadow risk)
extensions/cli/src/__mocks__/commands/commands.ts
possible ▼
CHK-054 Tool 'read_file' — generic name without namespace prefix (shadow risk)
core/tools/applyToolOverrides.vitest.ts
possible ▼
CHK-054 Tool 'cmd' — generic name without namespace prefix (shadow risk)
core/commands/slash/built-in-legacy/cmd.ts
possible ▼
CHK-054 Tool 'read_file' — generic name without namespace prefix (shadow risk)
packages/openai-adapters/src/test/anthropic-caching.live.test.ts
possible ▼
CHK-054 Tool 'write_file' — generic name without namespace prefix (shadow risk)
packages/openai-adapters/src/test/anthropic-caching.live.test.ts
possible ▼
CHK-032 Agent 'intro' has no explicit 'cannot do' boundary
docs/agents/intro.mdx
possible ▼
CHK-032 Agent 'overview' has no explicit 'cannot do' boundary
docs/agents/overview.mdx
possible ▼
CHK-032 Agent 'create-and-edit' has no explicit 'cannot do' boundary
docs/agents/create-and-edit.mdx
possible ▼
CHK-032 Agent 'AGENTS' has no explicit 'cannot do' boundary
extensions/cli/AGENTS.md
possible ▼
▼ Show 8 false positives (18% of this view) Last scanned: May 30, 2026
More servers
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
skypilot-org/skypilot 85
obra/superpowers 85
Foundational skill pack by Jesse Vincent now in anthropics/claude-plugins-official. Includes ffuf web-fuzzing/pentest skill. Partial analysis done — full hook and plugin inspection pending. tier=T2
191k★
Significant-Gravitas/AutoGPT 85
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.
186k★
nanocoai/nanoclaw 85
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
30k★
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
Scan your entire org's MCP deployment
2,500+ repos pre-scored. 22% carry CRITICAL findings.