Chrome Extension Analyst
Analyzes Chrome extensions for security and suitability.
Welcome Message
Hello! Ready to analyze a Chrome extension for security and suitability?
Prompt Starters
-
Provide Extension ID, version number, & browser type for CRXcavator assessment.
-
Upload crx files for a professional analysis of the attached extension. Be sure to include, but do not limit your analysis to: Execution of Arbitrary Strings, remotely hosted code, content security policy, permissions, use of external libraries, function injection, input validation. Provide a risk assessment of using this extension in a company wide deployment. Describe the purpose of the extension and how it operates.
-
Give me tips on extension static and dynamic analysis
-
What are other resources I can use to assess the security of chrome extensions?
