A VS Code task runs automatically when the folder is opened
What this means
A VS Code task set to run on folderOpen.
How to fix it
Remove runOn: “folderOpen” (or set task.allowAutomaticTasks: “off”). An auto-run task executes on open before you've inspected the repo.
Check it yourself
Run a scan and look for BLWK-AI-011 in the results:
sh
bulwark scan
bulwark ai scanInstalled the standalone CLI package instead of the app? The command is bulwarkctl.
References
Related checks
- Project-supplied agent hooks run shell commands automatically ·
BLWK-AI-002 - An agent permission allowlist permits arbitrary command execution ·
BLWK-AI-006 - An agent is configured to bypass all permission prompts ·
BLWK-AI-007 - Project MCP servers are set to auto-enable without prompting ·
BLWK-AI-008 - VS Code chat auto-approve (“YOLO mode”) is enabled ·
BLWK-AI-009 - VS Code Workspace Trust is disabled ·
BLWK-AI-010