Extension Security Auditor

A defensive, legal static analysis tool for auditing Chrome extensions. ExtensionAuditer performs automated security reviews of browser extensions to identify permission risks, data flow issues, and potential privacy concerns.

Built in Python, the tool analyzes extension manifests, code paths, and API usage patterns to surface security and privacy gaps that might otherwise go unnoticed. Designed for security researchers, developers, and privacy-conscious users.

What I Built

Static analysis pipeline for Chrome extension manifest parsing.
Permission risk assessment with prioritized severity tiers.
Data flow analysis to track how extensions handle user data.
Automated reporting with actionable remediation steps.

Technical Details

Language Python-based analysis framework.

Scope Manifest v2/v3 extension analysis.

Output Structured security reports with risk ratings.

Links

GitHub Repository Case Study