Safeguarding VS Code against prompt injections