Real-time browser extension behavior monitor — risk scoring, anomaly detection, supply chain attack alerts. Chrome + Firefox.
Evidence-driven browser security assessment framework for Edge, Chrome, and Firefox with policy, runtime, compliance, and risk verification.
CLI-first security scanner for VS Code extensions. Detect malicious behavior, leaked secrets, and supply chain risks — offline, open-source, CI/CD ready.
Chrome extension that analyzes installed extensions and scores risky permissions for quick privacy and security visibility.
Benign Chrome MV3 detection markers for validating browser-extension security scanners. Educational use only. EICAR-equivalent pattern for extension detection.
Security review and permission auditing reports for browser extensions, analyzing dynamic behavior, DOM modifications, and security risks.
NEXGEN Sentinel is a privacy-focused browser extension that helps users understand the security and privacy signals of installed browser extensions.
Cybersecurity project demonstrating browser extension auditing, permission analysis, and browser security awareness.
Audit VS Code / Cursor / Windsurf extensions for supply-chain risk: unclaimed and squattable Open VSX namespaces, publisher drift between the Marketplace and Open VSX, and hidden-Unicode payloads (the GlassWorm trick). Offline, single Go binary.
GuardRails by Abscissa: VS Code extension-package security, exact-release evidence, workspace monitoring, and a read-only OAuth MCP server.
To associate your repository with the extension-security topic, visit your repo's landing page and select "manage topics."