extension-security

Evidence-driven browser security assessment framework for Edge, Chrome, and Firefox with policy, runtime, compliance, and risk verification.

CLI-first security scanner for VS Code extensions. Detect malicious behavior, leaked secrets, and supply chain risks — offline, open-source, CI/CD ready.

Real-time browser extension behavior monitor — risk scoring, anomaly detection, supply chain attack alerts. Chrome + Firefox.

Chrome extension that analyzes installed extensions and scores risky permissions for quick privacy and security visibility.

NEXGEN Sentinel is a privacy-focused browser extension that helps users understand the security and privacy signals of installed browser extensions.

Security review and permission auditing reports for browser extensions, analyzing dynamic behavior, DOM modifications, and security risks.

Audit VS Code / Cursor / Windsurf extensions for supply-chain risk: unclaimed and squattable Open VSX namespaces, publisher drift between the Marketplace and Open VSX, and hidden-Unicode payloads (the GlassWorm trick). Offline, single Go binary.

Benign Chrome MV3 detection markers for validating browser-extension security scanners. Educational use only. EICAR-equivalent pattern for extension detection.

Cybersecurity project demonstrating browser extension auditing, permission analysis, and browser security awareness.

GuardRails by Abscissa: VS Code extension-package security, exact-release evidence, workspace monitoring, and a read-only OAuth MCP server.