What the inspector shows

The report covers identity and compatibility, required and optional permissions, host permissions, content scripts, background configuration, CSP, externally_connectable and web-accessible resources.

A findings section highlights dynamic code, remote script references, DOM injection, storage, messaging and sensitive-data indicators with file and line references.

Related pages:extension manifest viewerextension permission analyzer

Inspector versus browser developer tools

An online inspector reviews a package before installation. Browser developer tools can inspect an installed extension's pages and network traffic at runtime. The two approaches answer different questions: capability and configuration versus observed behavior.

Use the inspector to decide whether an extension deserves installation. Use runtime tools in a separate profile when you need to confirm network activity.

Related pages:remote script detectorexternal domain finder

Privacy of the inspection

Files are processed locally in a Web Worker. The inspector does not need your Google account, browser profile or installed extension list. The report exists only in the page and can be exported by you.