extension-security

CLI-first security scanner for VS Code extensions. Detect malicious behavior, leaked secrets, and supply chain risks — offline, open-source, CI/CD ready.

Real-time browser extension behavior monitor — risk scoring, anomaly detection, supply chain attack alerts. Chrome + Firefox.

Evidence-driven browser security assessment framework for Edge, Chrome, and Firefox with policy, runtime, compliance, and risk verification.

Chrome extension that analyzes installed extensions and scores risky permissions for quick privacy and security visibility.

Security review and permission auditing reports for browser extensions, analyzing dynamic behavior, DOM modifications, and security risks.

NEXGEN Sentinel is a privacy-focused browser extension that helps users understand the security and privacy signals of installed browser extensions.

Get warned when a browser extension you use is sold, gains permissions, or disappears from its store. Chrome and Firefox. Part of Tinyward.

Audit VS Code / Cursor / Windsurf extensions for supply-chain risk: unclaimed and squattable Open VSX namespaces, publisher drift between the Marketplace and Open VSX, and hidden-Unicode payloads (the GlassWorm trick). Offline, single Go binary.

Cybersecurity project demonstrating browser extension auditing, permission analysis, and browser security awareness.

Benign Chrome MV3 detection markers for validating browser-extension security scanners. Educational use only. EICAR-equivalent pattern for extension detection.

GuardRails by Abscissa: VS Code extension-package security, exact-release evidence, workspace monitoring, and a read-only OAuth MCP server.