Score a browser extension before you trust it.

Paste a Chrome extension ID and we pull its live manifest from the Web Store, or paste a manifest.json directly. We score permissions, flag dangerous combinations, and summarize host reach.

The extension ID is the 32-character string in its Web Store URL.

Manifest is fetched live from the Chrome Web Store or parsed from your paste — nothing retained. We record only anonymous counts (never the extension) unless you've opted out in privacy settings.