microsoft / microsoft/vscode-websearchforcopilot
WebSearchTool does not request approval.
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 65
- Forks
- 15
- PR merge metrics
- No merged PRs in 30d
Description
In src/chatTool.tsx, WebSearchTool contains a functino called prepareInvocation.
prepareInvocation is reponsible for adding tool confirmation messages for the user.
However, the defined prepareInvocation does not include any confirmation message.
Neither VSCode copilot nor any other coding assistant tool threats the web search tool as approved by default
This is especially important because tools can be invoked directly by the LLM, so you must be extremely cautious in their handling.
Therefore, it is necessary to explicitly add this message.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Open src/chatTool.tsx around the WebSearchTool.prepareInvocation definition at line 31 and inspect how tool confirmation messages are handled. Add the missing confirmation message so web searches are not treated as approved by default; the work is done when invoking WebSearchTool explicitly requests user approval.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 55/100