Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.promptguard.co/llms.txt

Use this file to discover all available pages before exploring further.

The PromptGuard VS Code extension highlights unprotected LLM SDK calls in your code and provides quick fixes to add protection.

​
Installation

​
From VS Code Marketplace

  1. Open VS Code
  2. Go to Extensions (Cmd/Ctrl + Shift + X)
  3. Search for “PromptGuard”
  4. Click Install

​
From Command Line

code --install-extension promptguard.promptguard-vscode

​
From VSIX

Download from GitHub Releases: 
code --install-extension promptguard-vscode-0.2.1.vsix

​
Features

​
Inline Diagnostics

Unprotected LLM calls are highlighted with squiggly underlines:
  • Red (Error): Unprotected calls in production code
  • Yellow (Warning): Calls in potentially sensitive files
  • Blue (Info): Protected calls (informational)

​
Hover Information

Hover over a highlighted call to see:
  • Provider name (OpenAI, Anthropic, etc.)
  • Whether it’s protected
  • Link to fix or learn more

​
Quick Fixes

Click the lightbulb or press Cmd/Ctrl + . to see fixes:
FixDescription
Add promptguard.init()Initialize SDK at file top
Wrap with GuardClientUse direct scanning
Add to ignore listSuppress this finding
Open documentationLearn more

​
Problems Panel

All findings appear in the Problems panel (Cmd/Ctrl + Shift + M): 
src/api/chat.py
  ⚠ Line 45: Unprotected OpenAI call (promptguard)
  ⚠ Line 89: Unprotected OpenAI call (promptguard)

src/agents/helper.ts
  ⚠ Line 23: Unprotected Anthropic call (promptguard)

​
Status Bar

The status bar shows protection status:
  • Protected — All LLM calls are secured
  • 3 unprotected — Click to see findings
  • Scanning… — Analysis in progress

​
Configuration

​
Settings

Open Settings (Cmd/Ctrl + ,) and search for “PromptGuard”:
SettingDefaultDescription
promptguard.enabletrueEnable/disable extension
promptguard.scanOnSavetrueScan when file is saved
promptguard.scanOnOpentrueScan when file is opened
promptguard.severitywarningDiagnostic severity level
promptguard.exclude["**/test/**"]Glob patterns to exclude

​
settings.json

{
  "promptguard.enable": true,
  "promptguard.scanOnSave": true,
  "promptguard.severity": "error",
  "promptguard.exclude": [
    "**/test/**",
    "**/tests/**",
    "**/*.test.ts",
    "**/*_test.py"
  ]
}

​
Workspace Settings

Create .vscode/settings.json in your project: 
{
  "promptguard.exclude": [
    "**/fixtures/**",
    "**/mocks/**"
  ]
}

​
Commands

Access via Command Palette (Cmd/Ctrl + Shift + P):
CommandDescription
PromptGuard: Scan Current FileScan the active file
PromptGuard: Scan WorkspaceScan all files in workspace
PromptGuard: Initialize ProjectRun promptguard init
PromptGuard: Show All FindingsOpen findings panel
PromptGuard: Clear DiagnosticsRemove all highlights

​
Supported Languages

LanguageFile Extensions
Python.py
JavaScript.js, .mjs, .cjs
TypeScript.ts, .mts, .cts
JSX.jsx
TSX.tsx

​
Supported Providers

The extension detects calls to:
  • OpenAI
  • Anthropic
  • Google AI (Gemini)
  • Cohere
  • AWS Bedrock
  • Azure OpenAI
  • Mistral
  • Groq

​
Ignoring Findings

​
Inline Comment

# promptguard-ignore: intentionally unprotected
response = client.chat.completions.create(...)

// promptguard-ignore: test fixture
const response = await openai.chat.completions.create(...);

​
File-level Ignore

# promptguard-ignore-file
# This entire file is ignored by PromptGuard

​
Via Settings

Add to promptguard.exclude: 
{
  "promptguard.exclude": [
    "**/legacy/**",
    "src/deprecated.py"
  ]
}

​
Integration with CLI

The extension uses the same detection engine as the CLI. If you have the CLI installed, the extension will use it for scanning: 
# Install CLI for better performance
brew install promptguard/tap/promptguard
Without the CLI, the extension uses a built-in scanner.

​
Troubleshooting

Check:
  • Is the file a supported language (.py, .ts, .js)?
  • Is promptguard.enable set to true?
Try:
  • Reload window: Cmd/Ctrl + Shift + P → “Reload Window”
  • Check Output panel for errors: View → Output → PromptGuard
Check:
  • Is the file excluded in settings?
  • Does the file have LLM SDK imports?
Try:
  • Run “PromptGuard: Scan Current File” manually
  • Check the Problems panel (Cmd/Ctrl + Shift + M)
Solutions:
  • Add test directories to promptguard.exclude
  • Use # promptguard-ignore comments
  • Lower severity to information
Solutions:
  • Disable scanOnSave for large projects
  • Add node_modules, .venv to exclude list
  • Install CLI for faster native scanning

​
Telemetry

The extension collects anonymous usage data to improve the product:
  • Extension activation events
  • Command usage counts
  • Error reports (no code content)
Disable in settings: 
{
  "promptguard.telemetry": false
}
Or use VS Code’s global telemetry setting: 
{
  "telemetry.telemetryLevel": "off"
}

​
Changelog

​
v0.2.1 (February 2026)

  • Added AWS Bedrock provider detection
  • Improved TypeScript parsing
  • Fixed false positives in JSX

​
v0.2.0 (January 2026)

  • Quick fix actions
  • Status bar indicator
  • Workspace scanning

​
v0.1.0 (December 2025)

  • Initial release
  • Python and JavaScript support
  • Inline diagnostics

​
Contributing

The extension is open source:

​
Next Steps

CLI Tool

Scan from command line

GitHub Scanner

Automated CI scanning

Python SDK

Runtime protection

Node.js SDK

JavaScript protection