Extension Analyze (Security & Compliance Auditor)

Audit an existing Chrome extension. Do NOT just explain — execute the workflow.

Workflow (Execute This)

Step 1: Locate extension root and detect framework

Ask user for path if not provided. Detect framework:

ls wxt.config.ts plasmo.config.ts vite.config.ts manifest.json 2>/dev/null

• Plasmo: manifest auto-generated; check package.json and plasmo.config.ts instead
• WXT: check wxt.config.ts manifest section
• Vanilla/CRXJS: check manifest.json directly

Step 2: Scan manifest.json (or equivalent config)