Observed arrival · 2026-09-03
Extension Preflight checks a Chrome extension ZIP before submission
A browser-based scanner checks Chrome extension packages for manifest, permission, remote-code, and packaging risks without uploading the ZIP.
Field notes
The scanner reads a selected Chrome extension ZIP in the browser and evaluates nine package-level rules, including manifest validity, permission patterns, remote scripts, missing files, and basic obfuscation signals. A Dark Reader 4.9.130 package serves as a live example. The page distinguishes exact manifest-based checks from weaker text-search and statistical heuristics, and explicitly excludes store-listing, privacy-policy, and runtime-functionality review.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue