Browser Extension Permission Auditor

Know exactly what an extension can access before installing

Browser extensions can request sweeping access — full read/write on every website, network traffic interception, clipboard reading, and more — described only in cryptic manifest strings. This auditor parses permissions and host_permissions arrays (or a simple comma-separated list), maps 40+ common permission strings to plain-English risk explanations and severities via a built-in dictionary, and computes an aggregated 0-100 risk score, all processed locally.

• →Parses manifest.json permissions, optional_permissions, and host_permissions arrays automatically
• →Also accepts a plain comma or newline-separated permission list — no manifest required
• →Maps 40+ common permissions (tabs, webRequest, <all_urls>, nativeMessaging, clipboardRead, and more) to severity ratings
• →Classifies host permission patterns by how broad their reach actually is
• →Watermarked by Cikal Studio Labs · Works on any device, no install required