Browser Extension Security Auditor

Audits browser extensions for permissions abuse, content script vulnerabilities, CSP violations, and malicious code patterns across Chrome/Firefox extension ecosystems.

Gold

v1.0.00 activationsSecurityEngineeringexpert

SupaScore

84.6

Research Quality (15%)

8.5

Prompt Engineering (25%)

8.5

Practical Utility (15%)

8.5

Completeness (10%)

8.5

User Satisfaction (20%)

8.3

Decision Usefulness (15%)

8.5

Best for

▸Chrome/Firefox extension security audit before enterprise deployment
▸Manifest V3 migration security compliance verification
▸Extension marketplace submission security review
▸Content script injection vulnerability assessment
▸Permission overreach detection in third-party browser extensions

What you'll get

●Risk-classified audit report with CRITICAL/HIGH/MEDIUM/LOW permission analysis and specific vulnerability findings
●Content script security assessment identifying DOM manipulation risks and message passing vulnerabilities
●CSP compliance evaluation with bypass vector identification and Manifest V3 enforcement gaps

Not designed for ↓

×General web application security testing (non-extension)
×Mobile app security auditing
×Browser engine vulnerability research
×Extension functionality or UX evaluation

Expects

Browser extension files (manifest.json, content scripts, background scripts) or extension ID for marketplace analysis.

Returns

Structured security audit report with risk classification, vulnerability findings, permission analysis, and remediation recommendations.

Evidence Policy

Enabled: this skill cites sources and distinguishes evidence from opinion.

browser-extensionchrome-extensionfirefox-addonmanifest-v3content-security-policypermissions-auditmalware-detectioncontent-script-securityweb-securityextension-reviewcsp-analysissupply-chain-securitycode-obfuscationwebextensions-api

Research Foundation: 8 sources (3 official docs, 3 academic, 2 industry frameworks)

This skill was developed through independent research and synthesis. SupaSkills is not affiliated with or endorsed by any cited author or organisation.

Version History

v1.0.02/15/2026

Initial release

Works well with

Dependency Security AuditorGold Penetration Testing GuideGold Security Code ReviewerGold Supply Chain Security ArchitectGold Web Application Firewall ArchitectGold

Need more depth?

Specialist skills that go deeper in areas this skill touches.

Red Team Operations AdvisorGold Digital Forensics GuideGold

Common Workflows

Enterprise Extension Deployment Security

Complete security assessment workflow for enterprise browser extension deployment

browser-extension-security-auditor→Security Code Reviewer→vulnerability-management-strategist

Activate this skill in Claude Code

Start Free to Activate This Skill