Browser extensions, while immensely helpful, are also incredibly powerful. Their vast reach to millions of users makes them attractive targets for malicious actors.

Malicious code embedded in extensions can collect sensitive user data, inject unwanted ads, or misuse computing resources—all without the user’s knowledge or consent. This underscores the risk posed by seemingly trusted extensions that can “go rogue” or become compromised, jeopardizing your data and privacy.

Extension Auditor aims to raise awareness by providing visibility into all installed extensions that request high-risk permissions.

Although Microsoft's Security, Trust, and Safety teams work tirelessly to protect users, maintaining a safer browsing environment requires collaborative efforts.

By staying vigilant, actively monitoring permissions, and fostering cooperation among users and the developer community, we can collectively reduce the risks posed by malicious extensions and make browsing safer.

🔑 Features

- 🔍 Real-time Security Analysis: Instantly analyzes installed extensions for security considerations.
- ⚠️ Risk Classification: Categorizes findings into Critical, High, Medium, and Low severity levels.
- 🛡️ Permission Analysis: Detailed explanation of each extension’s permissions and their security implications.
- 🌐 Host Access Analysis: Identifies extensions with broad host permissions or access to sensitive domains.
- 📊 Comprehensive Report: Generates detailed security reports with specific findings and potential risks.
- 🕵️ Privacy Focus: Runs locally in your browser with minimal required permissions.


🛠️ How it works

Extension Auditor analyzes extensions based on several factors:
- 🔑 Permission Analysis: Evaluates the permissions requested by extensions and their potential security implications.
- 🌐 Host Access: Identifies broad host permissions that could pose privacy risks.
- 💻 Content Script Analysis: Examines how extensions interact with web pages.
- 📜 Manifest Analysis: Reviews extension manifest settings for security best practices.
- 📈 Combined Risk Assessment: Calculates overall risk based on multiple security factors.


🛡️ Privacy

The extension runs entirely in your browser and:
❌ Does not collect any personal data.
❌ Does not send data to external servers.
❌ Does not modify any other extensions.
❌ Does not modify webpage content.

🌍 Let’s make browsing safer—for all of us. 🌟